Okay, nice. Managed to lock down this #littlefedi instance a little bit more to prevent my accidentally “public” posts to be scraped via the web interface.

In my littlefedi.toml:

[web]
redirect_guests_to_about = true

And then in #OpenBSD relayd I have the following in addition to this:

/etc/relayd.conf

[…snip…]

http protocol “http_to_https” {

    #[... snip...]
    # Littlefedi forwards
    block request quick path pattern "^/public/local"
    pass request quick header "Host" value "0xde501a7a.net" forward to <littlefedi>
     #[...snip...]

}

This should be solid enough :)