Embed Notice

@jwildeboer Thanks for your recent posts on that topic, was very helpful and pushed me to finally do the same :)
How did you protect/hide your Forgejo instance? Just setting repos to private, or is there an additional layer, esp in front of the web app, like client certs or a proxy?