Caddy 2.11.6 hardens the reverse proxy by default and adds URLPattern matching
The 2.11.6 release caps request headers at 16 KiB, cuts Slowloris connections, and drops dot-header fields, at the cost of breaking changes. Read them before upgrading a production Caddy server.