DNS for let’s encrypt and just have the same definition for all of your caddy servers and whatever you point your domains at will work as expected. Single config and redundancy with certs.