HTTP(s) reverse proxy. Currently, all HTTP connections (the kind you make with your web browser) come in through here, and then go to the appropriate server.

Usually, TLS/SSL is also terminated here - Caddy has an integrated ACME client that gets trusted certificates from Let's Encrypt.

Managed declaratively through Nix.