Description
Run custard on the droplet next to Soft Serve's data dir. Caddy fronts it for auto-TLS and proxies clone + tarball paths.
Acceptance Criteria
- #1 Caddyfile: auto-TLS; reverse-proxy /git/.git/* -> Soft Serve HTTP :23232; serve /dl/*
- #2 systemd unit for custard with REPOS_PATH pointed at Soft Serve repos dir
- #3 Public read of all non-hidden repos verified live; git clone via /git/* works