LXC and reverse proxy

You can’t use Let’s Encrypt to get a certificate for wordpress01, so use the local issuer instead:

tls internal {
   on_demand
}

This is documented here: Automatic HTTPS — Caddy Documentation and here: tls (Caddyfile directive) — Caddy Documentation