Static stuff and a reverse proxy to my actual services, since my hardware's all behind CGNAT.