Production endpoint ready

VPS hardened, reverse proxy active, TLS managed by Caddy.