mholt

63 ms·

1. 871.▲
   by mholt 6y ago

   Caddy is designed for precisely this use case: https://caddyserver.com It can handle thousands of domains easily, with Let's Encrypt (or any other ACME CA), even if you don't control your customer's domains. Hit u
2. 872.▲
   by mholt 6y ago

   I'm using a Caddy app I wrote that updates my DNS records, and it works for any DNS provider that has an API: https://github.com/mholt/caddy-dynamicdns/
3. 873.▲
   by mholt 6y ago

   Someone's a little out of the loop.
4. 874.▲
   by mholt 6y ago

   It's "safe" in that you can't read or write memory you're not supposed to be able to access. The program will crash, but at least you can't steal (or sabotage) data in memory.
5. 875.▲
   by mholt 6y ago

   I agree with this, there is no substitute for a "real" camera. However, I usually only have my phone on me, so, I decided to make that into a novelty selling point for my online store: https://finerpixels.com The whole
6. 876.▲
   by mholt 6y ago

   I can see why they think that, but we really don't know the full etymology: https://knowhy.bookofmormoncentral.org/knowhy/where-does-the... > When the Brother of Jared and his companions traveled, they “did al
7. 877.▲
   by mholt 6y ago

   Don't do it. People will hate you for it... and never, ever let you live it down. :-/
8. 878.▲
   by mholt 6y ago

   > Session ticket keys, which are a major weak link in Forward Secrecy in TLS 1.0-1.2, are now rotated automatically every day, and dropped after 7 days. Wooooah, that's awesome! Up to now I think only Caddy has been doing this autom
9. 879.▲
   by mholt 6y ago

   This is a well-written article for lwn subscribers, by HN's very own @benhoyt. If you read lwn, I definitely recommend subscribing; it consistently has high-quality technical content.
10. 880.▲
    by mholt 6y ago

    Cool, that's similar to my project Timeliner: https://github.com/mholt/timeliner It downloads your data from social media (or other online sites) into a single sqlite database. It can even draw relations between v
11. 881.▲
    by mholt 6y ago

    Yeah, Starlark is still on my list. It'd be a killer feature, but it's a huge project.
12. 882.▲
    by mholt 6y ago

    Thank you Toby :) Glad you've been with us for so long! Thank you for your support.
13. 883.▲
    by mholt 6y ago

    We have a WIP distributed cache module here: https://github.com/caddyserver/cache-handler
14. 884.▲
    by mholt 7y ago

    Have you tried our site search? It's the same service that powers the HN search.
15. 885.▲
    by mholt 7y ago

    Please do try to mount an attack on your server's admin endpoint; let me know if you're able to break into it. Keep in mind that if your system runs untrusted code, all bets are off: there's not really anything we can do as a
16. 886.▲
    by mholt 7y ago

    Yeah, my hope is that someone will write a sort of scheduler / supervisor app for it so that I don't have to keep re-learning systemd every time I stand up a new service...
17. 887.▲
    by mholt 7y ago

    > Was it influenced by Envoy? Not really -- it was more like, I sat down and thought about it: "I want to be able to change ANYTHING about my server using a simple REST endpoint. Hmm..." and then I remembered that JSON can be t
18. 888.▲
    by mholt 7y ago

    Ah, I knew I recognized that username! Thanks Andrew ;) How'd your thesis defense go? Wish I could have... ya know... been there.
19. 889.▲
    by mholt 7y ago

    Thanks -- honestly, the website was the least of my concerns up to this point, but it'll get more attention now that the software is actually released.
20. 890.▲
    by mholt 7y ago

    * Citation needed? (I mean, yes, of the thousands of dimensions of a web server, Caddy is not the fastest or leanest in all of them, but what's important to you?) Counterpoints: - https://twitter.com/mattiasgeniar/
21. 891.▲
    by mholt 7y ago

    Absolutely. And Caddy adds its on-line config API and simpler configuration experience for an all-around more secure, easier-to-maintain, harder-to-get-wrong system.
22. 892.▲
    by mholt 7y ago

    That systemd file was def. a community effort. Glad to hear Caddy is working for you!
23. 893.▲
    by mholt 7y ago

    See the big "Thank you" note on the landing page; also GitHub sponsors: https://github.com/sponsors/mholt
24. 894.▲
    by mholt 7y ago

    Love reading stuff like this, thank you.
25. 895.▲
    by mholt 7y ago

    Nothing automated, but our upgrade guide will get you most of the way: https://caddyserver.com/docs/v2-upgrade Still, I recommend just going into v2 with a blank slate and just discover it anew. :)
26. 896.▲
    by mholt 7y ago

    It's written in Go, so right out the gate you get stronger memory safety guarantees than other servers written in C, which results in more secure software on your edge. Caddy's HTTPS/TLS implementation is among the most robus
27. 897.▲
    by mholt 7y ago

    "Latest", as in "1 hour ago" latest, or "15 minutes ago" latest? Because the 2.0 image (not RCs) is needed and I think it only got published a few minutes ago. Edit: You also need to plug it in. xcaddy bu
28. 898.▲
    by mholt 7y ago

    Still WIP but very promising, and pure Go too!
29. 899.▲
    by mholt 7y ago

    I mean, we want one too, but it's ridiculously hard: https://news.ycombinator.com/item?id=23072385 Help? :D
30. 900.▲
    by mholt 7y ago

    tls { dns cloudflare <api_token> } Replace <api_token> with your API token, or you can store it in an env variable and use {env.CLOUDFLARE_API_TOKEN} for example.