Remove --environ
flag in caddy.service
--environ
prints the environment at the start of caddy. This can be useful temporarily for debugging but not good to add to service permanently. When secret info like API keys are passed via environment, they are logged in journal which is not good.