Served by Caddy behind a WireGuard self-tunnel, routed by TLS SNI passthrough (real Let's Encrypt certificate, issued via TLS-ALPN-01) to homeserver.org and www.homeserver.org.
homeserver.org
www.homeserver.org