Served from the LAN host "relaytest" via QUIC tunnel. TLS terminates here, with a Let's Encrypt cert obtained through the tunnel (TLS-ALPN-01).