Description

Run custard on the droplet next to Soft Serve's data dir. Caddy fronts it for auto-TLS and proxies clone + tarball paths.

Acceptance Criteria

• #1 Caddyfile: auto-TLS; reverse-proxy /git/.git/* -> Soft Serve HTTP :23232; serve /dl/*
• #2 systemd unit for custard with REPOS_PATH pointed at Soft Serve repos dir
• #3 Public read of all non-hidden repos verified live; git clone via /git/* works