Restrict access to caddy admin api

playbooks/roles/caddy/templates/Caddyfile.j2

@@ -1,14 +1,21 @@
 {
 	email {{ admin_email }}
 
+    metrics
+
 	servers {
-		metrics
 		strict_sni_host on
 	}
 }
 
 import /etc/caddy/snippets
 
+http://{{ host_vpn.domain }} {
+    import vpn_only
+
+    metrics
+}
+
 *.serguzim.me {
 	import acmedns