6 ms·

Caddy sounds like the go to tool for people who care a lot about getting things done. It's time for me to try it.

bavell 2y ago
Eh, it's a bit over hyped imo although I do like the config format and built-in acme. My production clusters all run nginx though and give me minimal fuss with a lot of flexibility.
diarrhea 2y ago
A coworker of mine dislikes it as it bundles everything into a single binary. For example, to have ACME DNS-01 challenges for certificate issuance working, I need to compile in a Google DNS-specific plugin. But then it... just works. Try the same with most other web servers/proxies and you're in for a world of pain. Having this much functionality bundled into a single binary is as much a curse as it is a blessing. That said, having your own little 'Cloudflare Workers' in the form of Nginx Unit with wasm sounds great. Not sure Caddy can do that.
- TheCapeGreek 2y ago
  For me, the promise of Caddy and especially tools around it like FrankenPHP make the "everything in a single binary" idea the MORE enticing option, not less. Sure we already have repeatable infrastructure, containers, etc. but I also love the idea of just building and shipping a PHP app binary that includes the webserver. It makes server provisioning even less of a priority, especially if I have reasons to not use serverless or PaaS tools.
- AbraKdabra 2y ago
  Having a single binary is definitely what drives me to use certain software, Deno is one of them.
  - beeboobaa3 2y ago
    It's great until you want to include a non-standard plugin and need to compile your own binaries. Now that single binary deployment requires you to compile the software yourself. Caddy has nice tooling for this but it'd be far more convenient to just drop a dll/so file in the right directory. Single binary deployments are great if someone else did the compiling for you. If you need to compile yourself it truly does not matter if you need to ship a single binary or a directory or whatever.
9dev 2y ago
If you want to see a real-life example of what Caddy can do, feel free to check the configuration of my iss-metrics project: https://github.com/Radiergummi/iss-metrics/blob/main/caddy/Caddyfile https://github.com/Radiergummi/iss-metrics/blob/main/caddy/C... I was in the same boat as you and wanted to try out what Caddy is capable of. I was immediately convinced. So many features, where you expect them. Consistent configuration language. Environment interpolation, everywhere. Flexible API. It’s really all there.
- ac130kz 2y ago
  From the first glance it doesn't look convincingly better than a generic and manually polished nginx configuration. Are there any other benefits to Caddy?
  - corobo 2y ago
    It does all the letsencrypt stuff for you - certbot is not a massive hassle if you're just serving the one domain of course but I really liked it for that when I was setting up a redirect server (corps do love buying TheirBrand.everytld haha) Set the config up with CI/CD and can now just edit the config and git push knowing Caddy will just handle the rest
    - ac130kz 2y ago
      Seems to be a middleground between doing certs on a small scale with cronjobs and a fully fledged automated Kubernetes cluster.
      - nyolfen 2y ago
        it is a total displacement for the former and stupidly simple compared to the either; gold standard 'just works'
  - 9dev 2y ago
    If you choose to start the project with docker compose, you’ll notice how it will immediately bring up a fully functional reverse proxy setup with TLS support on localhost; set the SITE_DOMAIN environment variable to your proper domain instead, and you’ll find that configured as well, along with a proper, ACME-issued certificate. Add a bit more effort, and you’ll also get mTLS for all services automatically. All of this is more or less doable with nginx, I’ve done it often enough. But read the Caddyfile and tell me this isn’t miles ahead in clarity.
page_fault 2y ago
It's a fine project right up to the point of you needing additional functionality that's split into one of the plugins. Since Go applications do not support proper .so in practice, you have to build your own binaries or rely on their build service, and this puts the responsibility of supporting and updating such custom configuration on you. So no setting up unattended-upgrades and forgetting about it.
- thegeekpirate 2y ago
  I think that's what https://caddyserver.com/docs/command-line#caddy-upgrade https://caddyserver.com/docs/command-line#caddy-upgrade (and the following commands) are for ;)
  - beeboobaa3 2y ago
    > experimental also totally non-standard, apt unattended-upgrades won't be doing that for you. sure you can do a cronjob, but, non-standard
NetOpWibby 2y ago
I recently setup a Flarum forum and the instructions mentioned Apache and Nginx. I sighed until I saw Caddy immediately below. Caddy really is the most pleasant webserver software I’ve ever used.

Eh, it's a bit over hyped imo although I do like the config format and built-in acme. My production clusters all run nginx though and give me minimal fuss with a lot of flexibility.

diarrhea 2y ago

A coworker of mine dislikes it as it bundles everything into a single binary. For example, to have ACME DNS-01 challenges for certificate issuance working, I need to compile in a Google DNS-specific plugin. But then it... just works. Try the same with most other web servers/proxies and you're in for a world of pain. Having this much functionality bundled into a single binary is as much a curse as it is a blessing. That said, having your own little 'Cloudflare Workers' in the form of Nginx Unit with wasm sounds great. Not sure Caddy can do that.

TheCapeGreek 2y ago
For me, the promise of Caddy and especially tools around it like FrankenPHP make the "everything in a single binary" idea the MORE enticing option, not less. Sure we already have repeatable infrastructure, containers, etc. but I also love the idea of just building and shipping a PHP app binary that includes the webserver. It makes server provisioning even less of a priority, especially if I have reasons to not use serverless or PaaS tools.
AbraKdabra 2y ago
Having a single binary is definitely what drives me to use certain software, Deno is one of them.
- beeboobaa3 2y ago
  It's great until you want to include a non-standard plugin and need to compile your own binaries. Now that single binary deployment requires you to compile the software yourself. Caddy has nice tooling for this but it'd be far more convenient to just drop a dll/so file in the right directory. Single binary deployments are great if someone else did the compiling for you. If you need to compile yourself it truly does not matter if you need to ship a single binary or a directory or whatever.

9dev 2y ago

If you want to see a real-life example of what Caddy can do, feel free to check the configuration of my iss-metrics project: https://github.com/Radiergummi/iss-metrics/blob/main/caddy/Caddyfile https://github.com/Radiergummi/iss-metrics/blob/main/caddy/C... I was in the same boat as you and wanted to try out what Caddy is capable of. I was immediately convinced. So many features, where you expect them. Consistent configuration language. Environment interpolation, everywhere. Flexible API. It’s really all there.

ac130kz 2y ago
From the first glance it doesn't look convincingly better than a generic and manually polished nginx configuration. Are there any other benefits to Caddy?
- corobo 2y ago
  It does all the letsencrypt stuff for you - certbot is not a massive hassle if you're just serving the one domain of course but I really liked it for that when I was setting up a redirect server (corps do love buying TheirBrand.everytld haha) Set the config up with CI/CD and can now just edit the config and git push knowing Caddy will just handle the rest
  - ac130kz 2y ago
    Seems to be a middleground between doing certs on a small scale with cronjobs and a fully fledged automated Kubernetes cluster.
    - nyolfen 2y ago
      it is a total displacement for the former and stupidly simple compared to the either; gold standard 'just works'
- 9dev 2y ago
  If you choose to start the project with docker compose, you’ll notice how it will immediately bring up a fully functional reverse proxy setup with TLS support on localhost; set the SITE_DOMAIN environment variable to your proper domain instead, and you’ll find that configured as well, along with a proper, ACME-issued certificate. Add a bit more effort, and you’ll also get mTLS for all services automatically. All of this is more or less doable with nginx, I’ve done it often enough. But read the Caddyfile and tell me this isn’t miles ahead in clarity.

page_fault 2y ago

It's a fine project right up to the point of you needing additional functionality that's split into one of the plugins. Since Go applications do not support proper .so in practice, you have to build your own binaries or rely on their build service, and this puts the responsibility of supporting and updating such custom configuration on you. So no setting up unattended-upgrades and forgetting about it.

thegeekpirate 2y ago
I think that's what https://caddyserver.com/docs/command-line#caddy-upgrade https://caddyserver.com/docs/command-line#caddy-upgrade (and the following commands) are for ;)
- beeboobaa3 2y ago
  > experimental also totally non-standard, apt unattended-upgrades won't be doing that for you. sure you can do a cronjob, but, non-standard

NetOpWibby 2y ago

I recently setup a Flarum forum and the instructions mentioned Apache and Nginx. I sighed until I saw Caddy immediately below. Caddy really is the most pleasant webserver software I’ve ever used.