Signals

Current public services are expected to answer on HTTPS, redirect from HTTP where appropriate, and expose only intended frontend ports.

Unexpected port exposure or certificate drift should be treated as a maintenance event.