Okay, nice. Managed to lock down this #littlefedi instance a little bit more to prevent my accidentally "public" posts to be scraped via the web interface. In my littlefedi.toml: [web] redirect_guests_to_about = true And then in #OpenBSD relayd I have the following in addition to this: # /etc/relayd.conf # [...snip...] http protocol "http_to_https" { #[... snip...] # Littlefedi forwards block request quick path pattern "^/public/local" pass request quick header "Host" value "0xde501a7a.net" forward to #[...snip...] } This should be very solid enough :)