you have to set the setting to make it reverse proxy aware. swag is a nginx based reverse proxy with a lot of builtin configs for various services and customizations.

if you really don’t want anyone to access your topics, you can set default permissions to none and then manually allow per topic for each user (selfhosted ntfy)