Deploy Open WebUI in a Podman container with systemd integration, put nginx in front with SSL and WebSocket support, and lock down the firewall.