id: OPS-001
title: Public Caddy Route for Lombard Dashboard
status: backlog
priority: P1
effort: S
depends_on: []
tags: [ops, deploy, routing]
summary: Move the production route to public HTTPS at lombard.uncloud.tech.
acceptance_criteria:
  - Caddy proxies lombard.uncloud.tech to the deployment container.
  - HTTPS works with a valid certificate.
  - Health check succeeds through Caddy.
  - Deployment docs note that vd1.uncloud.vpn was retired in favor of the public route.
technical_notes:
  - Keep public-exposure controls aligned with SEC-001 Turnstile bootstrap protection.