Tiny self-promotion: I maintain a simple Ansible playbook for maintaining/installing my own PDS.
The most interesting part is the Caddyfile -> github.com/fry69/altq.n...
It includes support for @baileytownsend.dev's 2FA gatekeeper.
Maybe this also helps for inspiration.
