Note: This server uses a self-signed SSL certificate. When a production domain is pointed at this host, the certificate will be replaced via certbot --nginx. File access is served with security headers (HSTS, CSP, X-Frame-Options) to minimise exposure of these audit files in transit.