{ # Caddy sits behind HAProxy which passes raw TLS through on :8443. # ACME HTTP-01 challenges arrive on :80 via HAProxy's acl passthrough. http_port 80 https_port 8443 } {$DOMAIN} { root * /srv file_server }