A Caddy Certificate Expired Because systemd-resolved Was Selectively Broken

A TLS certificate expired on a Caddy instance. The site was up, DNS was resolving, and Caddy was running. The cert just... lapsed. The issue turned out to be systemd-resolved. What happened The server was running systemd-resolved as its DNS resolver,...