2
Caddy seems to good to be true? I just set it up and it works perfect, straight out of the box (alien.top)
submitted 2 years ago by [B] to c/main@selfhosted.forum
63 comments fedilink hide all child comments
 

This seems too straightforward, what's the catch?

Like how secure is it? Should I be turning it off (and disabling the port forwarding) when not using it?

Do I need any additional security? Mainly just want to use it for Jellyfin

Thanks

you are viewing a single comment's thread
view the rest of the comments
[–] [B] 1 point 2 years ago (14 children)

I switched from Traefik to Caddy a few years ago and have no ragrets. The only complaints I have about Caddy:

  • It doesn't support configuring virtual hosts automatically via docker labelsl (like Traefik).
  • Many features (like DNS auth for certs) require compiling Caddy. Which is easy but annoying.
  • permalink
  • fedilink
  • source
  • hideshow 14 child comments
    •
  • [–] [B] 1 point 2 years ago (1 child)

    Random question from a noobie…. Why do you use something like Traefik versus something like Cloudflare Zero Access? (Again sorry if question is dumb). I’m just a new guy to this learning as I go and after getting up zero access with a $8 domain and now being able to securely access everything via subdomains it seems confusing why apps like Traefik are still so popular? I know I’m missing something there but hoping someone points it out.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [B] 1 point 2 years ago

    I wrote something that can setup caddy automatically from docker labels.

    It's not well documented as I mostly wrote it for myself. https://hub.docker.com/r/mheys1/docker-dynamic-caddy https://github.com/mattheys/ddc

    It basically acts like a DNS server serving up SRV records that caddy can use for dynamic configuration, I added in an on_demand_tls endpoint as well so that you don't get spammed for non existent TLS records.

  • permalink
  • fedilink
  • source
  • parent
  • [–] [B] 1 point 2 years ago (1 child)

    Anyone know if Caddy would be a good pick for a reverse proxy on a public subnet to distribute traffic to a bunch of subdomains in low traffic settings? I figure it could be a single source for all HTTPS stuff in my stack.

    Or is it really just for like single applications running through Docker? Sorry, I haven’t played with it too much.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •