caddy uses a self-signed certificate