A clean, secure endpoint served over HTTPS through the Caddy reverse proxy. This static site is published by an Nginx container on a custom port and fronted by automatic Let's Encrypt TLS.