[rstupek]

Could one run caddy and serve their own TLS termination?

[sudhirj]

Yes, it’s possible to ask for the raw connection to be passed to the application and self-manage TLS.