give the option for doing local host http and then using a rev proxy

deploy/reverse-proxy/Caddyfile.example

@@ -0,0 +1,9 @@
+# Replace overlord.example.com with the public DNS name. Caddy obtains and
+# renews the public certificate automatically.
+overlord.example.com {
+	reverse_proxy 127.0.0.1:5173 {
+		header_up Host {host}
+		header_up X-Forwarded-Proto https
+		header_up X-Real-IP {remote_host}
+	}
+}

deploy/reverse-proxy/nginx.conf.example

@@ -0,0 +1,31 @@
+# Place the map in nginx's http {} context.
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name overlord.example.com;
+
+    ssl_certificate     /etc/letsencrypt/live/overlord.example.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/overlord.example.com/privkey.pem;
+
+    # Keep this at least as large as the uploads allowed by Overlord.
+    client_max_body_size 2g;
+
+    location / {
+        proxy_pass http://127.0.0.1:5173;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
+        proxy_buffering off;
+    }
+}