See https://docs.enclosed.cc/self-hosting/configuration for more env variables that you can set including restricting public access.

The attached volume is necessary so that notes remain in tact on re-deploy.

Github: https://github.com/CorentinTh/enclosed