The AIO installation uses a master container, but it requires a reverse proxy on the host to handle the SSL certificate handshake via Let's Encrypt.