mholt

69 ms·

901.
by mholt 7y ago
Yes, we do! Others have linked to it. Did you see the "Tutorials" section at the top of our docs, along with the quick-start guides, one of which is specifically for reverse proxying? https://caddyserver.com/docs&#
902.
by mholt 7y ago
We thought of this! As francislavoie said, Caddy's retry logic involves switching to the Let's Encrypt staging endpoint until the DNS resolves properly. That is coupled with exponential backoff. Hitting the staging endpoint as a t
903.
by mholt 7y ago
Not a stupid question, it's not a phrase you hear very often because there isn't... really... one... at all. (Not in mainstream use AFAIK?) Memory safety is a class of guarantees certain software offers you against certain vulnera
904.
by mholt 7y ago
D'aww, thank you! I was really nervous to post this on HN because HN has also been the source of great misery for me in the past, frankly. But I'm relieved at the overall positivity today. Maybe because it's Star Wars Day we&
905.
by mholt 7y ago
Ha, oops. Thanks.
906.
by mholt 7y ago
Cloudflare plugin, that does what exactly? You mean like this one? https://github.com/caddy-dns/cloudflare (I'm using it today, works great. Assuming that's what you meant.)
907.
by mholt 7y ago
I've always felt like that was kind of a hack, but with Caddy's API it's doable. I don't really use Docker myself, so... want to contribute the feature? I'll show you how to integrate it. You might be interested in
908.
by mholt 7y ago
It's often used as a reverse proxy and static file server, but oh, so much more is possible. Today, if you're using HTTPS, you should almost certainly be using Caddy. Maybe tomorrow if you need to set up a memory-safe SSH server,
909.
by mholt 7y ago
Very cool! I'll save this link.
910.
by mholt 7y ago
I see. Yeah, I think CertBot does that because of limitations in Apache (and possibly nginx as well) with "virtual hosting". So yeah, Caddy uses one name per certificate by default, and there's no way to change that.
911.
by mholt 7y ago
Is it too slow for you?
912.
by mholt 7y ago
Thanks for sharing your experience! I'll admit I got bit by a few differences between the v1 Caddyfile and the v2 Caddyfile too. Namely forgetting * at the end of a path _prefix_ matcher. (In Caddy 2, path matches are exact, unless you
913.
by mholt 7y ago
Thanks, we'll work on it! The nav/flow of content could probably be improved. Not gonna lie though, there's more to learn. V2 is a powerful machine -- so do expect that there will be some reading. Once you know how it works,
914.
by mholt 7y ago
The new website does not yet have the ability to register plugins. I'm writing it -- I already have the new build server mostly written -- but like with v1, it may take a few months. It's not worth delaying the release for that, e
915.
by mholt 7y ago
Don't worry about the "additional complexity" -- config adapters are modular, and only the Caddyfile adapter is baked into the standard modules. Just plug in the adapters you need. Caddy functionality can grow rather infinite
916.
by mholt 7y ago
You definitely can, just prepend your site address with http:// or use port :80 (the HTTP port). More info: - https://caddyserver.com/docs/caddyfile/concepts#addresses - https://caddyserver.
917.
by mholt 7y ago
5 years later and it still feels like magic. (Thank you, Let's Encrypt)
918.
by mholt 7y ago
Yes, it is! Ask Jack Ellis at Fathom Analytics, they're doing this for their customers: https://usefathom.com/blog/bypass-adblockers -- and I think they have a new blog post and video coming out soon about it. Fee
919.
by mholt 7y ago
It was for a class during my grad program. It was an academic interest in understanding client behavior on the Internet that wasn't limited to proprietary networks like Cloudflare or Google. We collected some good measurement data -- a
920.
by mholt 7y ago
Both, technically. CommonName has been deprecated for years, so all of Caddy's certificates (and all of Let's Encrypt's) are SAN certificates. Caddy manages single-SAN certs, in accordance with recommended best practices: ht
921.
by mholt 7y ago
Yep, there are several reasons, you can read about them here: https://github.com/caddyserver/caddy/wiki/v2:-FAQ#why-json-f... Basically, it is highly interoperable and allows us to build config adapters on to
922.
by mholt 7y ago
As francislavoie said, the website with its nice one-click custom download page and list of registered plugins is a lot of work. It'll come, but it's not ready yet. Much like the v1 release 5 years ago where the interactive downlo
923.
by mholt 7y ago
Thank you for sharing your experience. Glad to hear it. Feel free to join our forums and be a part of the community! https://caddy.community - could always use more people with experience helping out. :)
924.
by mholt 7y ago
Thanks for the feedback! Glad you have had a good experience with it. That blog post is pretty old. We do have a current upgrade guide here in our docs: https://caddyserver.com/docs/v2-upgrade We also have a (sort of d
925.
by mholt 7y ago
Thank you for your feedback and support! I haven't actually heard of Narration Box before now, but it looks fantastic! I'm also a huge fan of Sourcegraph (@sqs if you're reading this!) -- which has really helped Caddy get to
926.
by mholt 7y ago
Some parameters might have one or two more words to type, but the growth in flexibility is enormous, and we felt it was worth the tradeoff. You can see a comparison here: https://caddyserver.com/docs/v2-upgrade#caddyfil
927.
by mholt 7y ago
The headers was one of the worst days of my life, believe me. I heard your feedback loud and clear and they were removed shortly thereafter... now about 3 years ago: https://caddy.community/t/the-realities-of-being-a-fo
928.
by mholt 7y ago
Hi HN -- this is what I've been working on for the last 14 months, with the help of many contributors and the backing of several sponsors. (Thank You!) Caddy 2 is a fresh new server experience. Some things might take getting used to, l
929.
by mholt 7y ago
We have several companies using it for tens of thousands of their customer sites. It's the only server we know of that can handle hundreds of thousands of certificates efficiently!
930.
by mholt 7y ago
It's out. The server was shut down months ago and v2 doesn't have a telemetry client at all.

More ›