That’s pretty simple ;)
If I had only paperless running, this would be the whole Caddyfile
{
acme_dns gandi api-key-here
email letsencryptemail@example.org
}
paperless.cwagner.me {
reverse_proxy 192.168.1.232:8000
}
I use Gandi for my domain, so I need the Gandi DNS module, which is not there by default, so you need to use one of the ways on that page to get it in.
While it’s easier with LXCs, even with VMs, you have more granular backups for easier recovery.