Hello, I had a comment which might be relevant to this thread, but I posted it in the wrong thread.
In a nutshell, I wanted to add that this could also be implemented using Caddy’s tls directive.
A plugin I’ve been working on might also help with the implementation of that approach. See my original comment if you’d like further details.