# Host Caddy

Live: `/etc/caddy/Caddyfile` on koopa (root/`caddy` group).  
Canonical mirror in this repo: **`configs/caddy/Caddyfile`** (same content as `host/caddy/Caddyfile`).

| Listen | Role |
|--------|------|
| **9000** | HTTP + ACME webroot + HTTPS redirect |
| **9001** | HTTPS vhosts |

Public sites: `taler` / `exchange` / `bank` / `castopod` / `bonfire` / `prime` / `bt` / **`git`** / **`paivana`** / tops.ng*.  
Forgejo HTTP: Caddy → `127.0.0.1:9024`. Git SSH is **host :9200** (not Caddy).  
Paivana: Caddy → `127.0.0.1:9025`.

Validate/reload on host:

```bash
sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl reload caddy
```
