mholt

42 ms·

601.
by mholt 4y ago
Caddy has always been open source. The source code has always been Apache licensed.
602.
by mholt 4y ago
Guess which web servers use(d) openssl...
603.
by mholt 4y ago
Caddy provides higher memory safety guarantees than C servers.
604.
by mholt 4y ago
There are several large corporations using Caddy. Several companies you've heard of and probably used the products of! I have a call with one of them every few weeks. I also know a huge hospital chain in the US is using Caddy.
605.
by mholt 4y ago
Thank you for the shoutout! Both projects have definitely been a community effort. There are many people and sponsors to thank. I've worked on both Let's Encrypt and Caddy. Indeed, the goal with Caddy is to set the gold standard f
606.
by mholt 4y ago
Yes
607.
by mholt 4y ago
Yes, definitely use CertMagic. Let me know if you have any questions!
608.
by mholt 4y ago
Right-click, Open Image in New Tab
609.
by mholt 4y ago
With Caddy, keep your filename the same and use try_files: try_files {uri}.html {uri} Done. (You can also add a redirect if you want to enforce that ONLY the non-.html version is used.)
610.
by mholt 4y ago
Me too. Thanks for being so helpful! Using Tailscale has been a pleasure, and you've got a great team over there, so integrating with TS has also been a dream.
611.
by mholt 4y ago
Had a call with Tailscale (unofficially); this will be coming for Caddy soon.
612.
by mholt 4y ago
We have a section for exactly this in our docs: https://caddyserver.com/docs/caddyfile/patterns#wildcard-cer... Hope that helps!
613.
by mholt 4y ago
For auth and identity stuff, try this plugin: https://github.com/greenpau/caddy-security
614.
by mholt 4y ago
Totally. Or here, without a config file: $ caddy reverse-proxy --from my.domain --to 10.0.0.2
615.
by mholt 4y ago
(Thanks) And yeah, I know -- that was an accident. :)
616.
by mholt 4y ago
Rather than JS, one can use Caddy's built-in template engine [0] to include headers/footers server-side (but way more powerful than SSI): {{include "/includes/header.html"}} No JS, no external build st
617.
by mholt 5y ago
Ooo. I signed up for updates. (Your website looks a lot nicer than mine ever will!) I like your projects' name better too... would still like to see if I can find a better one for mine that is available.
618.
by mholt 5y ago
Still deciding; I want it to appeal to general audiences, rather than only techies. Timelinize is taking a lot of my free time (along with a new family life, etc.), so Timeliner isn't being updated right now. (Also, I'm in the mar
619.
by mholt 5y ago
Great! First releases will probably be private betas. Twitter yes, Facebook somewhat (for now -- the API and data graph are very complicated!), Reddit probably not initially (but on my lists; need to learn how to get the data), and Hacker N
620.
by mholt 5y ago
Neat, and interesting that his conclusion is that it's too much effort to do for oneself. My take on this is Timelinize[0], which is capable of downloading all your data from various digital records like social media, your phone, arbit
621.
by mholt 5y ago
OpenSSL does not, however. (see Heartbleed)
622.
by mholt 5y ago
Yeah, lego's API and unreliability were the ultimate driving factors behind writing my own ACME stack. Actually, lego was originally commissioned for the Caddy project -- but then Caddy's needs evolved to having to support enterpr
623.
by mholt 5y ago
Glad you like it! I spent months designing the Caddy config and how the JSON structure would look/work. The docs pages took longer to make than the core of Caddy 2 did, so I'm glad you like those too and find them helpful. That pe
624.
by mholt 5y ago
... I don't get it, why not just use the Caddyfile yourself? Lots of people need the JSON config. But if it doesn't help you, you don't even have to know or think about JSON when you use the Caddyfile.
625.
by mholt 5y ago
Yep, that module is exactly how to do it! But Caddy's http server can also do basic logic around SNI if I recall correctly.
626.
by mholt 5y ago
True, that's one reason we haven't prioritized scripting too. Writing a plugin that is natively compiled in is just as easy and can perform even better.
627.
by mholt 5y ago
That's awesome!
628.
by mholt 5y ago
And memory safety! No C at the edge.
629.
by mholt 5y ago
Agreed. (Although, for now, you can run caddy adapt on your Caddyfile to get the JSON you're looking for.)
630.
by mholt 5y ago
Yes. High loads, and high stakes (hundreds of thousands of dollars worth of transactions per hour, is one metric I do know).

More ›