Block a user
asusmini: remove public Caddy vhosts + drop 80/443 (edge moved to pve Caddy LXC)
asusmini: open service ports via allowedTCPPorts (fix #1 — extraInputRules no-op on iptables backend)
asusmini: open 5555/5556/6555/3030 to the LAN (CC edge Caddy on pve)