Remote access
Turn on the public domain in the Admin Console first: Set up public access.
SSH uses the public domain address with ssh- in front. For acme.locai.computer, the SSH name is ssh-acme.locai.computer.
On your laptop:
ssh -o "ProxyCommand=cloudflared access ssh --hostname ssh-<name>.locai.computer" locailabs@ssh-<name>.locai.computerInstall cloudflared on the laptop. Port 22 is not open on the internet. On the office network you can still SSH to the LAN name and skip the tunnel.