The catalogue
Caddy
Reverse proxy with automatic Let’s Encrypt certificates, one route per project, for a domain outside Cloudflare.
- Module
- exposure.caddy
- Category
- Exposure
What it installs
- Caddy from its own repository, as a reverse proxy with automatic Let’s Encrypt certificates.
- One site block per project that declares a subdomain, rewritten from the registry every time it changes.
- The firewall rules its two ports need, under names of its own so hardening never takes them back.
What it asks you for
- The domain the projects answer under. Its A record, and the wildcard beside it, must already point at this server: Let’s Encrypt checks that path before issuing anything.
- The address Let’s Encrypt writes to about expiring certificates. It is never published and never leaves the server.
- The HTTP and HTTPS ports. 80 and 443 unless something else already has them.
Good to know
This one does open ports 80 and 443. It is the only module that does. Uninstalling closes them again and leaves the certificates it obtained in place.