So, uh, I decided to bite the bullet and try to set up Nextcloud on a new-from-scratch VMs.
I got most of the way there, but it looks like using the AIO install path causes the webserver container to bind 0.0.0.0:443 — but I want to access it over IPv6.
Do remind me again how IPv4 is "legacy" rather than "reality."