Blog

How to Host an Invisible Website

A website that exists — but only your network can see it.

February 2026

What if you could host a website on a real domain, with a real web server, but make it completely invisible to the public internet? No firewall rules. No IP allowlists. No VPN client configs. Just a site that only exists for devices on your Ghost network.

Why would you want an invisible website?

Internal Dashboards

Admin panels, monitoring dashboards, internal tools — accessible from anywhere, but invisible to the internet.

Paid Content Without Login

Courses, downloads, premium areas — access is controlled by the network, not by passwords or auth layers.

Staging Environments

Show clients a preview of their project. Only they can see it. No basic auth, no IP whitelisting.

Sensitive Documents

Legal, HR, financial docs on a private site. Even if the link leaks — nobody outside the network can open it.

1

Step 1: Set Up Your Ghost Network

Download Ghost Networks and create a network. Add the device that will host your website to a Phantom Hub.

Get Started
2

Step 2: Run a Web Server

Run any web server on your Ghost-connected device. It can be as simple as a one-liner:

# Python
python3 -m http.server 80
# Node.js
npx serve -l 80
# Nginx, Apache, Caddy...
sudo systemctl start nginx
3

Step 3: Point Your DNS

Create a DNS A record pointing your domain to the Ghost IP of your device. This IP only exists inside the Ghost mesh — it's not routable on the public internet.

DNS A Record
Type: A
Name: secret.company.com
Value: 172.16.0.5
TTL: 300

172.16.0.5 is a Ghost mesh IP. It only resolves for devices in the same Phantom Hub. For everyone else, this address leads nowhere.

4

Step 4: Browse From Any Hub Device

Any device in the same Phantom Hub can now open your domain in a browser and see the website. Anyone outside the Ghost network gets a timeout — the IP simply doesn't exist for them.

Ghost device
$ curl secret.company.com
<html>Welcome!</html>
Public internet
$ curl secret.company.com
curl: (28) Connection timed out

Temporary Access with BiFrost Pass

Need to give someone outside your network temporary access? Generate a BiFrost Pass from the dashboard. They scan the QR code, join the network, access the site — and when the pass expires, they're out. No accounts. No passwords. No revocation headaches.

Scan QR
Join network
Access site
Auto-expires

Sell Access, Not Logins

Use BiFrost Pass as a paywall without authentication. Sell passes with time-based expiration for courses, premium content, or exclusive downloads. Since access is network-level, sharing the link doesn't help — only the device with an active pass can reach the site.