Moving draftspinnr off the LAN
A couple of infrastructure tweaks to get a personal side project, draftspinnr, running over a real domain instead of a local-only setup.
Small infra day. I’d previously set up draftspinnr.local with HTTPS via Caddy’s internal TLS, a downloadable CA cert, and a firewall rule opening 443 to the LAN so it felt like a “real” site while still living entirely on my home network.
Today I moved it off the LAN entirely: draftspinnr now runs on GCP and is reachable at a proper subdomain through a Cloudflare Tunnel. With that in place, the old local setup became dead weight, so I cleaned it up — draftspinnr.local now just redirects to the new address, and I dropped the local-CA HTTPS config and the ufw rule that opened port 443 for it.
Net effect: one less thing running on my home server, and draftspinnr is now reachable like a normal website instead of a local-network curiosity.