docs, stacks: Caddyfiles moved to a folder mount (conf/Caddyfile)

docs/architecture-overview.md

@@ -1,6 +1,6 @@
 <!-- verified: 2026-09-18
-     rocky-docker-lxc@7dd5025 : caddy/Caddyfile
-     caddy-vm@9369f8b : caddy/Caddyfile
+     rocky-docker-lxc@d225776 : caddy/conf/Caddyfile
+     caddy-vm@c5c3420 : caddy/conf/Caddyfile
      trilium : 2wCPV6NXQa3l, 0mu75aAXGH8X, fscYadnUtmD5, QMTh5G7ldlLV, TIbCwYGitboy, Cl4TWBZ7ytYr, 6cJurv76PNDR, nAPJq9A1iuX8, DvKxK0gHXsng
 -->
 

docs/homelab-inventory.md

@@ -1,6 +1,6 @@
 <!-- verified: 2026-09-07
      ansible@9a4ba6d : roles/homelab_inventory_hardware, roles/homelab_inventory_vms, roles/homelab_inventory_services, playbooks/homelab_inventory_hardware.yml, playbooks/homelab_inventory_vms.yml, playbooks/homelab_inventory_services.yml
-     rocky-docker-lxc@145d3df : caddy/Caddyfile, dashy/docker-compose.yaml
+     rocky-docker-lxc@d225776 : caddy/conf/Caddyfile, dashy/docker-compose.yaml
      trilium : O0d4fqw0mr05
 -->
 

docs/netbird-zero-trust.md

@@ -1,5 +1,5 @@
 <!-- verified: 2026-09-19
-     netbird-lxc@13b5d80 : netbird/Caddyfile, netbird/docker-compose.yaml, netbird/config.yaml.ctmpl
+     netbird-lxc@ea8967e : netbird/conf/Caddyfile, netbird/docker-compose.yaml, netbird/config.yaml.ctmpl
      iac@f770e1c : ansible/roles/secure_vault/netbird_agent, terraform/containers.tf
      trilium : qWLU4xqYLdJ3, oYuIjaczDrZA, nAPJq9A1iuX8, Cl4TWBZ7ytYr
 -->
@@ -56,9 +56,10 @@ The real path a request takes:
 And this is the actual splitter doing that work — the real config, not a description of the logic:
 
 ```
-$ cat Caddyfile
+$ cat conf/Caddyfile
 {
-	admin off
+	# Container loopback only (port not published) - `caddy reload` needs it.
+	admin localhost:2019
 	auto_https off
 	servers {
 		protocols h1 h2 h2c

docs/secrets-and-pki.md

@@ -1,6 +1,6 @@
 <!-- verified: 2026-09-19
      iac@f770e1c : ansible/roles/secure_vault, ansible/group_vars/all/vault_provisioner.yml, ansible/roles/monitoring/mqtt_client
-     rocky-docker-lxc@7dd5025 : caddy/Caddyfile
+     rocky-docker-lxc@d225776 : caddy/conf/Caddyfile
      trilium : Eu0wns00QOBG, wovVrgvoDVy2, 1seDR2nBmxKO, GW8BMoTKtRBe, JbKe9CHzOP9D, Tu7FX48fxSQZ, DvKxK0gHXsng, otSPaU6IfjlP
 -->
 

docs/sso-and-identity.md

@@ -1,6 +1,6 @@
 <!-- verified: 2026-09-18
-     rocky-docker-lxc@7dd5025 : caddy/Caddyfile
-     caddy-vm@9369f8b : caddy/Caddyfile
+     rocky-docker-lxc@d225776 : caddy/conf/Caddyfile
+     caddy-vm@c5c3420 : caddy/conf/Caddyfile
      iac@f770e1c : ansible/roles/bootstrap_roles/docker_git_setup
      trilium : baWhWTUejvY6, hWiIGZIlvQiN, nAPJq9A1iuX8
 -->