Caddy

Reverse proxy + auto-TLS (Let’s Encrypt) for all domains.

Connections

• config: /opt/unlikely/caddy/Caddyfile
• proxies to: unlikely-api (port 8000)
• serves: Entirely-v2 (/opt/portal-v2/dist), Mostly-v1-Portal (/opt/portal-ui/dist)
• serves: cert-ui, mapper-ui, admin-ui, status-ui, enchilada-ui, pms-archive-ui
• proxies: Kulu (kulu.la → port 61325), stripe-invoice-webhook (webhooks.kulu.la → port 5050)

Notes

• Manages all TLS — no manual cert renewal needed
• All UIs are pre-built static assets (Vite → dist/)
• Domains: unlikely.pro, entirely.it.com, unlikely.works, unlikely.management, kulu.la, cert.kulu.la, mapper.kulu.la, etc.
• Reload: systemctl reload caddy