Very cool. Would play around with this in a heartbeat in the home lab, but Caddy's automatic HTTPS (ACME HTTP-01 and DNS-01 challenges) would be sorely missed.

I suppose one can supplement certbot in this setup? Or use the "highly programmable" APIs Pingora provides directly?