Maybe I was just duped again by the browser cache 
In any case, I switched that server to the default multisite setup, with caddy as reverse proxy. In the end it’s also straightforward and one thing I actually like is that the certificates are for each domain then (and not all domains shared on one certificate).
Have another server to update, I’ll try the adjustments another time with that one to see what’s necessary..
Thanks again!