The live production setup is Cloudflare -> Caddy (HTTP :80) -> SWS, which differed from the DNS-01 topology the doc previously assumed. Add a 'Deployment topologies' overview and a dedicated Cloudflare-fronted section pointing at the committed root Caddyfile, covering reverse_proxy, encode, security headers, and Cloudflare trusted_proxies. Label the existing Compose/K8s examples as the DNS-01 alternative.