Caddy error on https://127.0.0.1/ or sub1.localhost

We special-case tls internal to not require the ask endpoint when on-demand is enabled, so this will work:

https:// {
	tls internal {
		on_demand
	}
	respond "Hello Secure, Default! {host}"
}