Non-secret files that run the Group 1 Gitea (SQLite) behind a Caddy reverse proxy on one AWS EC2 instance. No passwords, tokens or keys are stored here.

File	Purpose
`docker-compose.yml`	Gitea `gitea/gitea:1.27.3` and Caddy `caddy:2.11.7`; only Caddy publishes ports 80 and 443
`Caddyfile`	Automatic HTTPS (Let's Encrypt) and reverse proxy to `gitea:3000`
`.env.example`	Image versions and the hostname; copy to `.env`
`aws/ec2-user-data.sh`	First-boot script for Amazon Linux 2023: 2 GB swap, Docker, git, pinned Docker Compose

Deploy: cp .env.example .env, then docker compose config -q && docker compose pull && docker compose up -d. The security group allows 443 and 80 from anyone and 22 only from the administrators' address.