Caddy reverse proxy on VPS. Handles TLS termination for rabbithole.unbiasedrhino.cyou. Proxies to Headscale on 127.0.0.1:8080. Proxies apestaart.unbiasedrhino.cyou to forge (100.64.0.6:8000) via Tailscale. Proxies dadsmusic.unbiasedrhino.cyou to ironclad-dadsmusic-serve (100.64.0.4:8766) via Tailscale.