caddy_reverse_proxy_default_handler:
  - handler: static_response
    status_code: 404

caddy_reverse_proxy_config:
  apps:
    http:
      servers:
        rproxy:
          listen:
            - "tcp4/:443"
            - "tcp6/:443"
          automatic_https:
            disable: yes
          tls_connection_policies:
            - match:
                sni:
                  - "{{ host_fqdn }}"
              default_sni: "{{ host_fqdn }}"
          routes:
            - match:
                - host:
                    - "{{ host_fqdn }}"
              handle: "{{ (caddy_reverse_proxy_handlers | d([])) + caddy_reverse_proxy_default_handler }}"
              terminal: true