caddy is up, tls works