Nope! The entire thing is behind nginx! And I'm not using dx serve either! I'm statically building each page server-side so I can ship zero WASM/JS (barring analytics) and then each page is served as plain HTML through Rocket. Rocket is bound to the loopback adapter which is proxied by nginx.