
Hello, I’m hosting a #Vaultwarden server behind #Caddy 2.10 and made the following test:
Tuning Caddy to allow only #PQC curves:
tls {
curves x25519mlkem768
}
Trying to connect with #Firefox Mac -> OK
Trying to connect with #Bitwarden #android client -> Fail
Without the #TLS tuning, the Bitwarden Android client will happily connect to the server.
Is it a problem with the Bitwarden Android client or with Android, or both?
Ha! I was able to get at least Forgejo configured with Pocket ID!
I thought I had to rebuild my Caddy container simply because I was misunderstanding how to properly configure it, but I don't actually need that. Interesting enough, the solution hit me in the head while I was brushing my teeth.
Okay, now let's see which other services accept OAUTH2.
Blog post about how FrankenPHP is now officially supported by the PHP Foundation
les-tilleuls.coop/en/blog/fran...
#PHP #FrankenPHP #Symfony #Drupal #Laravel #Wordpress #Caddy
RE: https://bsky.app/profile/did:plc:k3jkidzfkcdpsoxbisvuxz4f/post/3lpbmpak3pk2z
Ai-je trouvé la raison pourquoi #Caddy ne fait pas mieux que #Nginx pour faire passer l'IP du client?
Ça expliquerait pourquoi dans les logs de Caddy je vois parfois les IPv4 véritables des clients et d'autres fois l'adresse IPv4 locale de la passerelle du réseau #Docker. Dans le 2e cas (celui qui ne fonctionne pas), ce serait des clients en #IPv6.
La théorie se tient en tout cas !
https://github.com/caddyserver/caddy/issues/4339
Yesterday afternoon I've given @cryptpad a try.
Even though I don't really have a use for it, I wanted to test the installation on #freebsd.
It took only few minutes to create the jail, checkout the code, make the install and tune the configuration file.
Using #caddy as a proxy was really straightforward thanks to config examples, and they even provide an rc script for freebsd.
It's been a really long time since I've seen such a smooth and well documented install process for a non-packaged software. And I'm so happy they only provide docker as an option, not as the main (or only) supported installation method.
The senior #sysadmin in me is absolutely thrilled by the work of the #cryptpad team.
As a user I think the application is well designed and achieves the very difficult balance between secure design and usability.
Great job.
Pour remplacer Nginx comme reverse proxy, vous recommandez :
For caddy, I used wget and a custom subdomain.
caddy.container:
...
HealthCmd=wget --no-verbose --tries=1 --spider https://test.example.com/health-check || exit 1
HealthStartPeriod=10s
HealthInterval=30s
HealthTimeout=5s
HealthRetries=5
Notify=healthy
...
Caddyfile:
...
test.example.com {
respond /health-check 200
respond "Hello, world!"
}
...
Inspiration:
1) https://caddyserver.com/docs/caddyfile/directives/respond
Caddy 2.10 web & reverse proxy server lands with support for ECH, post-quantum key exchange, global DNS config, and wildcard certs by default.
https://linuxiac.com/caddy-2-10-web-server-debuts-enhanced-tls-privacy/
Some cleanup to the #Caddy #NixOS wiki page, especially documentation on the new plugin support with NixOS 25.05 https://wiki.nixos.org/wiki/Caddy#Plug-ins
I'm curious to hear what others are #SelfHosting! Here's my current setup:
Hardware & OS
Infrastructure & Networking
Security & Monitoring
Authentication & Identity Management
Productivity & Personal Tools
Notifications & Development Workflow
Accessibility Focus ️
Accessibility heavily influences my choices—I use a screen reader full-time (#ScreenReader), so I prioritize services usable without sight (#InclusiveDesign, #DigitalAccessibility). Always open to discussing accessibility experiences or recommendations!
I've also experimented with:
I don't really have a media collection, so no Plex or Jellyfin here (#MediaServer)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services!
What's your setup like? Any cool services you'd recommend I try?
#SelfHosted #LinuxSelfHost #OpenSource #TechCommunity #FOSS #TechDIY
Bon je comprend pas du tout pourquoi j'arrive pas a avoir de certif sur mon domaine pihole ... genre j'ai accès au pihole par le domaine pi.hole
je sais pas comment donc et donc le mien par caddy pihole.lan, mais impossible d'avoir un certif valide avec un joli no OCSP server specified in certificate
+ donc FF qui me sort un erreur de sécurité alors que pour Glance pas de soucis
Je comprend déjà même pas comment l'admin page de pihole tourne vu que y a pas lighttp ni php-fpm d'installer ... a moins que tout soit dans le bin de pihole ? et donc je l'ai dans l'os ?
Note : caddy étant sur une VM a part.
#Pihole #Caddy #Lighttp
Wir erzählen euch jetzt mal wohin die Reise geht mit #Uberspace8 in unserem ersten Übersichts Blogpost
I was tuning some cache headers and had questions. I checked the usual—Stack Overflow, blogs, AI—but they all disagreed. Then I remembered: the best source is to RTFM! Aka, read the RFCs. RFCs are your friend (and the OG source of truth) — https://datatracker.ietf.org/
As the next step in my quest to make it easier to poison AI crawlers, I present you: OCIocaine: a project where #DockerCompose meets #Caddy and #Iocaine, to poison AI crawlers for all your sites, automatically.
The idea here is to provide a docker compose file that starts up Caddy and Iocaine, configured so that Caddy will reverse proxy for any and all services on the same docker network, as long as they have a few labels that tell it to do so. In addition, a Caddyfile snippet will be available for all of these, which takes care of routing bad visitors to Iocaine.
And if that's not enough, the whole thing comes preconfigured with a wordlist (a list of English words), and traning data (the complete works of Shakespeare), and a list of known AI crawlers (courtesy of ai.robots.txt
).
All you have to do is copy the sample configuration, create a network, start it up, and deploy labeled containers into the same network, and OCIocaine takes care of the rest.
première nouvelle sur #caddy Web server, quand on fait du proxy pass ça ne log RIEN dans les logs d'accès. mais ouate de phoque.
#caddy qui dit que y'a une erreur mais qui ne dit pas dans quel bout de la config v_v la fatigue.
la conf est valide, mais si je veux faire un reload j'ai une erreur mystérieuse.
Bonjour l’#ESR !
Y-a-t’il des gens parmi vous ou vos collègues qui font tourner du #Moodle via des PHP-FPM en balance de charge derrière un frontal HTTP #Caddy ?
On est sur un boitier F5 en fin de vie qui répartit la charge entre 7 nœuds Apache + php-fpm. J’aimerai explorer une piste plus simple/moderne (où les nœuds font seulement le php, et où le frontal web gère HTTP/3, le renouvellement auto de ses certificat TLS, et peut être reconfiguré à chaud, etc).
Le #boost garantit un bon W-E :)