One Domain, Two Networks: AdGuard Conditional DNS + Caddy HTTPS for Local and VPN Access

A homelab pattern for dynamic IPs: VPN for access, AdGuard Home as tailnet DNS, and Caddy reverse proxy with automatic HTTPS using DNS challenge plugins.