# Caddy (host reverse proxy)

- Config: `Caddyfile` (also mirrored under `configs/caddy/`)
- TLS certs on disk: `/etc/caddy/certs/{taler,exchange}.hacktivism.ch/`
- HTTP 9000: ACME webroot `/var/www/acme` + redirect to HTTPS
- HTTPS 9001: vhosts → backends 9010 / 9011