It works! 🎉

Served by Envoy Gateway on k3s, deployed by Flux from Git,
secured by cert-manager and Let's Encrypt.