There we go! A little bit of certbot magic and https://pi.chrislewis.dev/ is ready to go.

I want to set up automated re-deployment of the website and test that it'll reliably come back up if the Pi restarts, but otherwise I guess there isn't much blocking me just serving my main site from it 🤔