passthejoe, to RaspberryPi
@passthejoe@ruby.social avatar

I just set up my first reverse proxy. Don't get too crazy — it was in the Caddy web server, where everything is easy.

I now have Caddy on my Raspberry Pi 4 Model B sending the traffic for one domain to a Raspberry Pi Zero W (also running Caddy).

Caddy makes this stuff easy.

I figured it out with this post:

https://caddy.community/t/running-a-caddy-server-behind-another-solved/13122/4

And the server (which is just showing the Caddy default page) is:

https://linux.stevenrosenberg.net/

badnetmask, to Blog
@badnetmask@hachyderm.io avatar

New post! Check out this great app that automatically scans your Compose file, proxies all your services behind , and requests TLS certificates for all of them using a private CA (). The cherry on top is getting behind the proxy, and secure!

https://mteixeira.wordpress.com/2024/04/12/proxying-apps-behind-caddy-with-certs-from-private-ca-using-home-assistant-as-example/

linuxiac, to linux
@linuxiac@mastodon.social avatar
vwbusguy, to firefox
@vwbusguy@mastodon.online avatar

Well, this is interesting.

vwbusguy,
@vwbusguy@mastodon.online avatar

@sesivany Also seeing this on issued Let's Encrypt certs on Firefox as well.

vwbusguy,
@vwbusguy@mastodon.online avatar

@deathkitten So far, I'm able to reproduce it with certs issued from , , and , both fresh and a month or two old.

Firefox 123.0.1 doesn't trust any of them.

Again, it still works because the OS CA trust includes it, so most users won't notice anything broken (yet).

mjaschen, to keyboard German
@mjaschen@digitalcourage.social avatar

Wochenrückblick, Ausgabe 28 (2024-07).

Diesmal mit

  • der Zukunft von BRouter-Web und Bikerouter
  • dem vielen Wasser, das hier überall auf Wiesen und Feldern steht
  • meiner Affinität zu Keyboards als primäres Interaktionselement mit Computern …
  • … und welchen Keyboard-Shortcut ich in Firefox schmerzlich vermisse
  • der macOS App Rectangle
  • dem Fork von nginx zu freenginx und wie ich am Wochenende nach 19 Jahren ausschließlich nginx-Nutzung mit Caddy erstmals einen anderen Webserver angeschaut habe und seit dem ziemlich begeistert bin
  • einer Anleitung wie man gute technische Dokumentation schreibt
  • mkcert und wie es xca als Management-Tool für meine lokale CA abgelöst hat
  • der Fernsehserie „Parlament“
  • und wie immer Techno.

https://www.marcusjaschen.de/blog/2024/2024-07/

jonah, to random
@jonah@neat.computer avatar

I’m finally getting over Caddyserver’s betrayal and learning to love it again (as everyone else already has lol). Latest thing I did, hosting all my domains on without needing to configure each website independently: https://www.jonaharagon.com/notes/a-caddyfile-for-hosting-your-domain-and-all-subdomains-on-tor/

Kovah, to random
@Kovah@mastodon.social avatar

Spent some time on the image for v2 this evening. Working with Docker for years now, but there's always something new to learn. 👨‍🎓

New stuff: out-of-the-box SQLite support, nginx was replaced with , smaller image size. 👍

vwbusguy, to jenkins
@vwbusguy@mastodon.online avatar

If you're using with , here's a way to make that a little less obvious to script kiddies:

route /* {
reverse_proxy localhost:8080 {
@unauthed status 401 403
handle_response @unauthed {
header -x-jenkins
header -x-jenkins-session
header -x-hudson
copy_response
}
}
}

vwbusguy, to linux
@vwbusguy@mastodon.online avatar

I really like , but sweet glory has it been a nightmare game of endless whack-a-mole for .

voltagex, to random
@voltagex@aus.social avatar

Looking for a no-bullshit host - must have a solid API / be supported by for DNS-01 challenges.

Metaname has been good but I think I've just hit issues with _acme-challenge. not working correctly.

Yearly billing would be good.

I'd host it myself but one of the email addresses is quite important and I don't want to blow it up.

osoporto, to classic
admin, to NixOS

If anyone has successfully gotten Peertube working on NixOS with Caddy, please message me. I've tried both Podman and the official NixOS packaging of it, and the farthest I've gotten is OAuth bitching about the externyal domain not being identical to the internyal IP. (If I configure the instance domain to be vcr.sbargv2.com, it throws a tantrum that it's not 192.168.86.38. If I set the instance domain to be 192.168.86.38, it throws a tantrum that it's not vcr.sbargv2.com)

mattwilcox, to random
@mattwilcox@mstdn.social avatar

i have hit this with too. Obey conventions in your api design. https://frfsh.plus.st/notes/9hxugdnvdqnjgnm7

flameeyes, to random
@flameeyes@mastodon.social avatar

I'm sorry but the exposed metrics are just … bad.

Values were not matching up at all until I realize that I can't filter the Caddy metrics per vhost, so I'm probably seeing the effect of the websocket connected for goaccess (which I'm also not fond of, but it just gained a cookie by demonstrating me this problem.)

dunglas, to random
@dunglas@mastodon.social avatar

🔥 It's now possible to build a fully static version of libphp and : https://github.com/crazywhalecc/static-php-cli/pull/153

What does this mean?! Come to next week to discover the new use cases this unlocks! https://api-platform.com/con/2023/conferences/opening-keynote/

box464, to random
@box464@mastodon.social avatar

Beginner Home Lab question. Using Portainer. Right now, I have an NGINX web server spun up serving a single website.

For new websites, what's the recommended path - add them to the current Nginx container? Or spin up a new Nginx web server container for each?

In my old way of thinking, it would be the former, but something tells me y'all are spinning up web servers left and right.

stefan,
@stefan@social.stefanberger.net avatar

@box464 @mmeier I‘m not using portainer but just docker-compose and I‘m also not using nginx but .

But I‘m running just one single caddy container for all the services. Works fine so far.

Freaky, to random

Just upgraded to 2.7.2 on FreshBSD.org. It didn't last very long:

Successfully started Caddy (pid=15076) - Caddy is running in the background
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x907c10]

Looks like it's HTTP/3 related, which I've disabled for now: https://github.com/caddyserver/caddy/issues/5680

Imagine inventing a programming language in 2009 and it still does this sort of thing...

dunglas, to golang
@dunglas@mastodon.social avatar

🎉 Mercure 0.15 has just been released!

This version uses the brand-new server 2.7 and slightly improves resource consumption by exploiting the new features introduced in 1.20.

Various fixes are also included.

Downloads and changelog: https://github.com/dunglas/mercure/releases/tag/v0.15.1

NAB, to random
@NAB@mastodon.me.uk avatar

After spending a good few hours trying to get an nginx reverse proxy app (docker, say no more) to start working again, I've just discovered .
For goodness sakes, it wasn't ever meant to be this easy!

vwbusguy, to openSUSE
@vwbusguy@mastodon.online avatar

Ooo, it's nice that is included in the Leap repos.

uvok, to random
@uvok@furry.engineer avatar

Uhhhh? What?

I just set up as a reverse proxy for dendrite.

Mainly for automatic certificates.

I forgot to do ufw allow port 80 (or the equivalent), only allowing port 443.
And yet I got the certificate from

...

Reading the locks, the "tls-alpn-01" challenge was used? What's that? Never heard of it before.

nicd, to random

Anyone know, does strip trailing periods and spaces from paths of requests it proxies upstream? does this on Windows for… reasons, and you can't turn it off.

major, to linux

I first starting tinkering with Caddy (the web server) when I hosted my own Mastodon instance, but my tinkering really only involved copying and pasting someone else's working configs.

After running it at home for some personal infrastructure, I'm really impressed. The config is quite minimal and lots of things I normally need to configure (like HTTPS redirects) are there right out of the box. 👏

#caddy #web #linux

scy, (edited ) to random
@scy@chaos.social avatar

So @element took part in the European Police Congress in Berlin, had a booth and presentation there, and is proudly posting on the fedi about it.

https://mastodon.matrix.org/@element/110304013472307767
https://mastodon.matrix.org/@element/110310853505977058

I’m currently paying them $11.90 a month to host my homeserver on their EMS platform.

My payment in April will have been the last.

It’s one thing to provide FLOSS comms to the government. It’s another to proudly support our fucked up police system.

scy,
@scy@chaos.social avatar

Also, the easiest part in the whole setup was – as always – . Took like five minutes to set it up as the reverse proxy, including fully automatic HTTPS certificates.

Honestly I haven’t been using Apache or nginx for years, and there’s nothing that I miss. Caddy is so easy to install (single binary), set up (five lines of configuration often suffice) and just works. Check it out if you’ve never used it, you might be never going back to anything else.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • everett
  • hgfsjryuu7
  • Youngstown
  • khanakhh
  • slotface
  • rosin
  • InstantRegret
  • ngwrru68w68
  • kavyap
  • vwfavf
  • thenastyranch
  • DreamBathrooms
  • PowerRangers
  • Leos
  • magazineikmin
  • Durango
  • tacticalgear
  • mdbf
  • cisconetworking
  • ethstaker
  • GTA5RPClips
  • osvaldo12
  • cubers
  • modclub
  • tester
  • normalnudes
  • provamag3
  • All magazines