Caddy handles TLS termination for Loki, automatically requesting and renewing its certificate via ACME.