Forward Only Locally

The backstage is restricted to local traffic only.

The app trusts one request header to decide who is "local".

Try visiting /backstage.