Running Ollama in Production: systemd, TLS, and API Auth

Originally published on DevToolHub. Ollama has zero built-in authentication, the default systemd unit isn't sandboxed, and the reverse-proxy example in Ollama's own FAQ has no TLS. None of that's a b