mholt

56 ms·

631.
by mholt 5y ago
Can you open an issue with more details? I don't think this has been reported before. So that's why it hasn't been fixed yet. But we'd like to look into it.
632.
by mholt 5y ago
Glad you enjoy it!
633.
by mholt 5y ago
Thanks for recommending it! I hear ya. The JSON config is definitely not trivial. I wrote our JSON docs and strove to made them easy to follow. You can traverse into the module structure piece-by-piece here: https://caddyserver.c
634.
by mholt 5y ago
Possibly; the long-lived connections eventually have to end when reloads (note: restarts and reloads are different) happen, to free up resources -- otherwise they leak. (The grace period is configurable and can even be disabled.)
635.
by mholt 5y ago
Best kept secret of Caddy+Docker.
636.
by mholt 5y ago
Kind of (indirectly); we don't have an interpreter built-in, but the JSON config is managed natively through an API: https://caddyserver.com/docs/api So yeah, you can write scripts that control Caddy while it&#x27
637.
by mholt 5y ago
I think just like any other server, but with fewer things to set up (HTTPS, certificates, etc). We also have an ingress controller in the works: https://github.com/caddyserver/ingress (Not a Kubernetes user, so my answ
638.
by mholt 5y ago
Francis definitely gets to claim the "Show HN" on this one, as he authored more commits to Caddy during this timeframe than I did: https://github.com/caddyserver/caddy/graphs/contributors?fro... He
639.
by mholt 5y ago
Basically this, yeah. You can add or take down backends without having to keep web server config in sync and reload it. (Though config reloads are pretty light anyways.)
640.
by mholt 5y ago
If your backends are registered via SRV records (e.g. Consul), this will be very useful for you! It also works similarly for A/AAAA records. This feature is modular, so other methods of retrieving backends can be implemented as well.
641.
by mholt 5y ago
Can you demonstrate an exploit in Caddy itself (i.e. isn't actually exploiting something else, or configuring yourself into a hole first -- we can't do much about external factors)? If it's valid we'll see about a patch.
642.
by mholt 5y ago
Glad you love Caddy. If the host is popped, I'm not sure what Caddy can do to save you. Even authentication has to be stored on the machine... that was popped.
643.
by mholt 5y ago
It's only accessible on the loopback interface.
644.
by mholt 5y ago
Really appreciate this feedback and the positive attitude. This is helpful, thank you!
645.
by mholt 5y ago
You're welcome! Thanks for the nice comment. :) We have many contributors and several maintainers to thank as well.
646.
by mholt 5y ago
Good question; I'm not really sure! Will need to look into it, or have people contribute some ideas. Feel free to start a discussion on the issue tracker if you're interested in this!
647.
by mholt 5y ago
Nice, this is kind of why I made Project Conncept. It's a powerful TCP and UDP stream multiplexer based on Caddy: https://github.com/mholt/caddy-l4 You can route raw TCP connections by using higher layer protocol
648.
by mholt 5y ago
Indeed, the link should not include "www.". (We've never used that subdomain.)
649.
by mholt 5y ago
What? Caddy has always been Apache-licensed, open source. And that's thanks to sponsorships which make it possible.
650.
by mholt 5y ago
With all due respect, you're wrong. If Caddy is serving any files, the user explicitly enabled that functionality. And when enabled, it only serves files within the root directory specified by the user, or the current working directo
651.
by mholt 5y ago
It could, if there was an ACME server doling out SSH certificates. And Caddy can get certificates via more than just ACME, it's completely extensible, so it will work with... anything I guess.
652.
by mholt 5y ago
(D'oh, I meant OpenSSH, but it's too late to edit.)
653.
by mholt 5y ago
I think it will just take some time. I'm glad we have a solid start on a new alternative, and hopefully people will use it, scrutinize it, and improve it. It's a little unsettling to realize that when the next vuln in OpenSSL is d
654.
by mholt 5y ago
That's incorrect. Caddy does not serve any files by default. You have to explicitly enable file serving in your config.
655.
by mholt 5y ago
What is involved in using PAM on Windows and Mac?
656.
by mholt 5y ago
Did this page help? https://caddyserver.com/docs/caddyfile/concepts - it explains the structure of the Caddyfile, what directives are, and goes from there.
657.
by mholt 5y ago
This is valuable feedback, thank you. A lot of people just say that the docs suck and we can't do anything about that. This is more helpful. I'll see what we can do to improve cohesiveness and clarity/accessibility.
658.
by mholt 5y ago
I do this, but I do not want to do this. Also it looks funky. The padding is messed up and the text doesn't fit.
659.
by mholt 5y ago
The flat UI trend baffles me. The removal of text from icons and buttons baffles me. For example, in Windows 11 I spent close to a minute looking for "Rename" in the right-click menu in Windows Explorer. Turns out it's not th
660.
by mholt 5y ago
Yeah, so that's kinda the idea. It's like an automatic life log from all your digital data. It can import Google Location History, for example, so you can see where you were at what time of day. Location History is kinda creepy wi

More ›