It works.

Served from a laptop through a tntee relay.

  1. Your browser opened TLS to the relay with a Let's Encrypt certificate for this exact name.
  2. The relay found the tunnel by name and passed the request down the laptop's encrypted link.
  3. The laptop's tntee up handed it to a local web server on loopback, and the page came back the same way.

Nothing on the laptop is reachable except this one port, and only while the tunnel is up.