Served by Kubernetes cluster rk1 through the Istio API gateway.
rk1
DNS by ExternalDNS, certificate by Let's Encrypt.