You can get Trellis to generate an auth.json for you on deploy: Composer failing due to incorrect GitHub fingerprint - #7 by alwaysblank
You mention this is a “fresh droplet”: have you provisioned it? Trellis: Remote Server Setup | Roots Documentation