caddy
site.caddy routes {$FIREFLY_UI_DOMAIN} to the project over the external caddy network. In a shared Caddy, mount this directory as /etc/caddy/projects.d/firefly-ui:ro and set FIREFLY_UI_DOMAIN. Keep it portable: domain only from the env, no tls, snippets prefixed with firefly_ui_.