https://www.onlyoffice.com/ may be an option. They have hosted plans but you can just use the office suite with local files for free if you don’t need a yof the hosted offerings features

Is Kubernetes so pervassive that a helm chart unlocks that many more entities?

Together?

This makes so much more sense.

How are you doing your certs with this set up?

DNS challenge so you can get a wildcard cert? Or is it still per domain? I haven’t looked recently but it seemed difficult but I’d like to avoid transparency log installs where I can.