Caddy serves every app on the machine. It gets the wildcard certificate on its own, and forward_auth is what puts the company sign-in in front of each app.
Caddy makes it super simple for us to provide dynamic SSL certificates, it's still hard to believe how simple it is to setup a robust reverse proxy with Caddy.
