nginx:alpine swarm service serving /var/lib/cc-ci-reports behind traefik (Host(report.ci.commoninternet.net) + wildcard TLS), deployed by a reconcile oneshot mirroring dashboard.nix. The /recipe-report skill writes the weekly HTML pages there; nginx serves them live. report.ci.* already resolves (wildcard *.ci DNS) and is covered by the wildcard cert. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>