Served by a container, proxied by Caddy, over TLS.

nginx:1.27-alpine on a unix socket