SSH port forwarding

The simplest option, and the only one that needs no flag at all.

$ ssh -L 9393:127.0.0.1:9393 you@your-machine

Then open http://127.0.0.1:9393 on the client. The forwarded port is loopback on both ends, so Frizz treats it as local: there is no public origin to declare and no access link to redeem.

Nothing is exposed to the internet. The cost is that the forward lives only as long as the SSH session, which makes it awkward from a phone — for that, use a name on frizz.sh or Tailscale.

Minting a link over the same connection

If you would rather reach the board by a real hostname later, the same SSH session is how a headless machine hands you a single-use code:

$ ssh you@your-machine 'npx frizz --link'