A minimal Linux machine for a simple public page and restricted SSH administration.
Restricted relay permissions are configured separately. Client connection and app checks are still required; this website exposes no relay or API.
HTTP port 80 serves non-sensitive content only. This is unencrypted HTTP: do not submit credentials or private information. There are no forms, login, API, or command endpoint.
No database, CI pipeline, GitHub dependency, document renderer, or application platform. More services can be considered only when needed.