5 ms·
I use dns01 in my homelab with step-ca with caddy. It's a joy to use
by samgranieri 1y ago
I use dns01 in my homelab with step-ca with caddy. It's a joy to use
- reactordev 1y ago+1 for caddy. nginx is so 2007.
- supriyo-biswas 1y agoOnly if they'd get the K8s ingress out of the WIP phase; I can't wait to possibly get rid of the cert-manager and ingress shenanigans you get with others.
- reactordev 1y agoYup. I can’t wait for the day I can kill my caddy8s service. The best thing about caddy is the fact you can reload config, add sites, routes, without ever having to shutdown. Writing a service to keep your orchestration platform and your ingress in sync is meh. K8s has the events, DNS service has the src mesh records, you just need a way to tell caddy to send it to your backend. The feature should be done soon but they need to ensure it works across K8s flavors.
- 01HNNWZ0MV43FF 1y agoI think you can that with Nginx too, but the SWAG wrapper discourages it for some reason
- pushrax 1y agojust send sighup to nginx and it will reload all the config—there's very few settings that require a restart
- reactordev 1y agoSure, how, from the container? The host it’s on? Caddy exposes this as an api.
- ilogik 1y agoTraefik seems to be ok for us
- darkwater 1y agoCaddy is just for developers that want to publish/test the thing they write. For power users or infra admins, nginx is still much more valuable. And yes, I use Caddy in my home lab and it's nice and all but it's not really flexible as nginx is.
- reactordev 1y agoCaddy is in use here in production. 14M requests an hour.
- mholt 1y agoWhere's that if I may ask?
- reactordev 1y agoTrust me, you don’t want to know. Just know - it’s working great and thank you. GovCloud be dragons.
- selfmodruntime 1y agoWe use Caddy across hundreds of apps with 10s of millions of requests per day in production.
- mholt 1y agoOooh. Can you tell me more about this?
- reactordev 1y agoIn case people are wondering, this is the author of Caddy. He’s curious where it’s being used outside of home labs and in small shops. Matt, it’s fantastic software and will only get better as go improves. I used it in a proxy setup for ingress to kubernetes that’s overlayed across multiple clouds - for the government (prior admin, this admin killed it). I can’t tell you more information than that. Other than it goes WWW -> ALB -> Caddy Cluster * Other Cloud -> K8s Router -> K8s pod -> Fiber Golang service. :chefs kiss: When a pod is registered to the K8s router, we fire off a request to the caddy cluster to register the route. Bam, we got traffic, we got TLS, we got magic. No downtime.
- RadiozRadioz 1y agoSo a tool's value should be judged as inversely proportional to its age?
- mholt 1y agoMaybe inversely proportional to how much the ecosystem moves around it.
- reactordev 1y agoA tools value is in the eye of the beholder. Nginx has ceased being valuable to me when they decided to change licenses, go private equity, not adapt to orchestration needs, ignore http standards, and not release meaningful updates in a decade.
- yjftsjthsd-h 1y ago> when they decided to change licenses, https://github.com/nginx/nginx/blob/master/LICENSE https://github.com/nginx/nginx/blob/master/LICENSE looks like a nice normal permissive license. I don't care that there's a premium version if all the features I want are in the OSS version.
- jcgl 1y agoPrivate equity? Either there’s a story I’m missing, or you’re mischaracterizing F5 as PE.
- reactordev 1y agoLookup Angie, freenginx, and the whole Rambler / F5 fiasco. Moscow feds involved and forced exploitation for profit.