web-profile vm: caddy is serving, tls is real