Served by nginx via Istio Gateway API.
TLS by cert-manager (Let's Encrypt). DNS by external-dns (Cloudflare).