When using `.localhost` in the Caddyfile, you don't even need the `tls internal` line since that's assumed for that TLD.