It works! 🎉

Served by nginx on k3s, deployed by Flux from Git,
secured by cert-manager and Let's Encrypt.