lab ok - Phase 1 (Caddy + TLS)