DNS, TLS and the proxy path are working — that is what this page is for. The application is not exposed until its administrative endpoints stop treating a loopback connection as an authorisation.
docs/SECURITY.md §3.1