added caddy provider support

vars.tf

@@ -62,6 +62,35 @@ variable "dns_records" {
   default = []
 }
 
+variable "caddy_host" {
+  description = "Caddy admin API endpoint. When using the SSH tunnel this is the endpoint as seen from the caddy host (e.g. http://localhost:2019). Leave empty to disable Caddy management."
+  type        = string
+  default     = ""
+}
+
+variable "caddy_ssh_host" {
+  description = "SSH target (user@host:port) used to tunnel to the Caddy admin API. Empty to reach caddy_host directly."
+  type        = string
+  default     = ""
+}
+
+variable "caddy_ssh_host_key" {
+  description = "SSH host key of the caddy host, known_hosts format (get it with: ssh-keyscan <ip>). Required when caddy_ssh_host is set."
+  type        = string
+  default     = ""
+}
+
+variable "caddy_proxies" {
+  description = "Reverse-proxy sites keyed by name. Each maps a hostname to one or more upstream backends (Caddy dial targets, e.g. \"192.168.0.40:32400\"). protocol picks plain HTTP on :80 (default) or HTTPS on :443 with automatic certificates. Set path to restrict the route to specific request paths."
+  type = map(object({
+    host      = string
+    upstreams = list(string)
+    protocol  = optional(string, "http")
+    path      = optional(list(string))
+  }))
+  default = {}
+}
+
 variable "ansible_inventory_path" {
   description = "Path where the generated Ansible inventory file is written. Defaults to ../ansible/inventories/generated.yml relative to this module, which points to the parent repo when used as a git submodule."
   type        = string