chore: Remove SSL cert handling - use external reverse proxy

- Nginx now listens on HTTP only (port 80)
- Remove SSL cert volume mounts from docker-compose
- Remove SSL troubleshooting sections
- Update docs to indicate SSL handled by Caddy/reverse proxy
- Simplify nginx.conf to remove HTTPS server block

docs/SETUP-INFRASTRUCTURE.md

@@ -47,9 +47,10 @@ cd coop-credits
 This script will:
 - Test connectivity to your services (Plex, Tautulli, Overseer)
 - Generate a secure `.env` file
-- Check SSL certificate status
 - Output configuration instructions
 
+**Note:** SSL/TLS is handled by your external reverse proxy (Caddy). The application runs HTTP on port 80 internally.
+
 ### 3. Configure Environment
 
 Edit the generated `.env` file:
@@ -96,40 +97,7 @@ anchor deploy
 
 Update `SOLANA_PROGRAM_ID` in `.env` with the deployed program ID.
 
-### 6. Setup SSL Certificates
-
-#### Option A: Let's Encrypt (Recommended)
-
-```bash
-# Obtain certificate
-docker-compose -f docker-compose.prod.yml run --rm certbot certonly \
-  --webroot -w /var/www/certbot \
-  -d coop.hobokenchicken.com \
-  --agree-tos --no-eff-email
-
-# Update nginx config to use Let's Encrypt paths
-# Edit docker/nginx/nginx.prod.conf:
-#   ssl_certificate /etc/letsencrypt/live/coop.hobokenchicken.com/fullchain.pem;
-#   ssl_certificate_key /etc/letsencrypt/live/coop.hobokenchicken.com/privkey.pem;
-```
-
-#### Option B: Existing Certificates
-
-```bash
-cp /path/to/your/cert.pem docker/nginx/ssl/cert.pem
-cp /path/to/your/key.pem docker/nginx/ssl/key.pem
-```
-
-#### Option C: Self-Signed (Testing only)
-
-```bash
-openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-  -keyout docker/nginx/ssl/key.pem \
-  -out docker/nginx/ssl/cert.pem \
-  -subj '/CN=coop.hobokenchicken.com'
-```
-
-### 7. Deploy
+### 6. Deploy
 
 ```bash
 ./deployment/deploy-production.sh
@@ -304,20 +272,6 @@ sudo ufw enable
    docker-compose -f docker-compose.prod.yml exec postgres pg_isready -U coop
    ```
 
-### SSL certificate issues
-
-1. Check certificate:
-   ```bash
-   openssl s_client -connect coop.hobokenchicken.com:443 -servername coop.hobokenchicken.com
-   ```
-
-2. Verify certificate paths in nginx config
-
-3. Check certificate expiry:
-   ```bash
-   openssl x509 -in docker/nginx/ssl/cert.pem -noout -dates
-   ```
-
 ## Maintenance
 
 ### Update Application
@@ -354,7 +308,7 @@ docker-compose -f docker-compose.prod.yml restart backend
 ## Security Checklist
 
 - [ ] Changed all default passwords in `.env`
-- [ ] SSL certificates installed and valid
+- [ ] External reverse proxy (Caddy) configured for SSL
 - [ ] Firewall rules configured
 - [ ] Tautulli webhook secret set
 - [ ] Overseer webhook secret set