yeah neither of those are strictly true. the tls directive in caddy allows you to provide cert files, since some servers (like mine) don't support a flow to "specify an ACME account email address".

I'm aware of the function of the tls directive, but presenting it in the documentation gives the impression it's required and discourages reliance on automation, where the latter is more critical than the former.

and removing -x-powered-by is good practice in general, though not required obviously.

It's not about requirement, rather about security benefit. If you believe it adds security benefit, that's fine. I'll concede. But the same isn't applied in the sample nginx config.

Do you prefer to keep the sample config as-is? If yes, the PR can be closed.

seeing as none of the other entries list TLS certs let's remove that line but keep the -server and -x-powered-by?

seeing as none of the other entries list TLS certs let's remove that line but keep the -server and -x-powered-by?

Done