Restrict Obsidian LiveSync to LAN and tailnet only.

Closes TB-005: obsidian.ginnoir.com was publicly reachable; sync clients use tailnet.
2026-06-10 22:19:50 -05:00
parent d5a54b24cc
commit 80b0fc6904
4 changed files with 9 additions and 8 deletions
@@ -306,8 +306,9 @@ plane.ginnoir.com {
 }

 # =============================================================
-# NOTES / PKM — public (obsidian-livesync syncs from any device)
+# NOTES / PKM — internal only (LiveSync over LAN or tailnet)
 # =============================================================
 obsidian.ginnoir.com {
+	import internal_only
 	reverse_proxy couchdb:5984
 }