ops: HTTPS/TLS termination for RPC (Caddy/nginx templates)

[TheNewAutonomy]

Goal

Run RPC over HTTPS for public testnets without changing consensus/P2P.

Scope

• Recommend TLS termination (Caddy or nginx) in front of the node RPC
• Provide example configs for:
  • rpc.address = "127.0.0.1" + reverse proxy on :443
  • optional wss:// for service bus/websocket if exposed
• Document firewall rules + IP allowlisting
• Include systemd unit examples and restart workflow after upgrades

Acceptance criteria

• Operator can deploy EU RPC as https://rpc.<domain> with a valid cert
• Node can run without exposing plain HTTP publicly