is it that caddy only has access to containers and not the host?