How DNS and Caddy Work in My Homelab

A deep dive into the DNS and Caddy design behind my Proxmox VE homelab rebuild: layered resolvers, a deliberate core/apps zone split, a Cloudflare Tunnel, and a second, fully separate Caddy for anything genuinely public.