🎉 It works.

You're reading a static file from a machine behind CGNAT at home, reached over the public internet at https://test.renzat.work.

internet → Traefik (TLS) on the Lightsail edge → WireGuard tunnel → this home node → python3 http.server :3000

All wired up by ingex, which never touched a single packet of it.