We use forgejo at work and the runners usually do the trick. You cab have them run any shell command you want, manage secrets and the syntax is the same as on github.

I think you flll for sarcasm.

Mostly yes, except when Bill Cipher was around. He skinned a screaming head once or stole the teeth of a deer.

Disney consored Gravity Falls a lot before the episodes even aired. Alex Hirsch (the creator) had constant trouble for even some minor things.

The funniest bit was, when they had a flyer that literally said “not S&P approved”, because S&P (standards and practices) wouldn’t approve the flyer saying “bottles will be spun”.

Edit: Okay, I saw your other post, ignore this answer. It won’t work.

Just to give you another way of doing it, I propose using “a third party provider” for your DNS, which you said you didn’t want, but since I think it could still work, I tell you how it would work:

Duckdns is a free provider for DNS and let’s you create standard certificates via let’s encrypt without exposing the rpi.

You can register for free and just input your local IP for the raspberry e.g. at charger8283.duckdns.org

Since the IP is local, no one outside your network can access it, but because the URL is registered globally, you can get a certificate using nginx proxy manager.

This would result in https traffic, that never leaves your local network and is also free.

Lemmy also allows you to edit your post afterwards, so you could still do it.