Placeholder page — site A
Served by an unprivileged nginx container behind Traefik v3 on an OCI Always Free ARM64 instance.
This page exists to prove routing, TLS and the Cloudflare → origin
trust boundary. Replace sites/site-a/public/index.html with real
content; no other change is required unless the hostname moves.