Self-hosted on Sally. Public links use HTTPS via Cloudflare; LAN / Tailscale entries need your home network or VPN.