Self-Hosting

This draft keeps the useful migration flow from a sensitive work log: prepare storage, install the package, preserve the SSH host identity, move the backups and secrets, restore GitLab cleanly, and validate the instance before you start trusting it again.

This draft turns a sparse work log into a short operations note on taking a Proxmox interface that originally lived on a direct host-and-port URL and exposing it through a Kubernetes-based Cloudflare Tunnel with a cleaner HTTPS hostname.