Ingress OK (Caddy + TLS). Upstream not yet configured.