Provisioned via the Proxmox LXC provisioning toolkit on CIPI (public hostname — reached via Cloudflare Tunnel externally, or the local DNS override internally).