Caddy as the Public Front Door for Self-Hosted Apps

How to structure Caddy as the HTTPS entry point for public apps, static sites, restricted tools, and monitoring endpoints.