[mholt]

You don't even need mkcert -- Caddy does all that for you in a local environment, and keeps the certs renewed.