Caddy log is full of “could not get certificate from issuer” errors. I checked again and the root of the domain is pointed at the IP of the VPS.