CAUTION! The static directory is served externally via Caddy and is not password protected via forward auth. Anything placed in this directory should be considered public