Put https://github.com/oauth2-proxy/oauth2-proxy in front of caddy.

upstream services > oauth2-proxy > caddy

Not sure what kind of services you want to run. But I guess you want auto https etc. so probably you want to stick to caddy.

I want to discover content, since lemmy is young communities form constantly. Reddit /all has no communities that are marked nsfw. Intuitively I'd assume nsfw instances or communities are searchable but are hidden from /all.

I don't get NSFW content from porn communities in reddit /all. The whole point of /all is discovery.