- Add explicit tls block with riotpiao-com-tls secret - Enables HTTPS access to https://forgejo.riotpiao.com - Matches wildcard certificate (*.riotpiao.com) The file comment mentioned TLS should be handled via default-ssl-certificate, but explicit TLS blocks are needed for proper HTTPS routing.