it works — test.fwouts.com served by native Caddy (edge; real client IPs)