I realize my home lab is a non critical learning device, but surprised to see #plex, #caddy x 2, #cloudflared, #minecraft running on less than 0.22% of CPU on #AMD Ryzen 7 5800H
Verwaltet von:
#caddy
3 Beiträge3 Beteiligte0 Beiträge heute
Fortgeführter Thread
Well, it's done. Wasn't too complicated, but I had to modify some of the reverse_proxy directives for some of my containers.
Anyway, I'm now running on #Caddy and don't have to use a rather complicated and long-running process to renew my certificates via letsencrypt.
I'll probably move from #Apache to #caddy for my Server. I'm using Apache mostly as a reverse proxy anyway, and the few HTML and PHP pages I can just move into containers too.
The built-in TLS handling might be easier for letsencrypt and I could stop using a custom DNS authentication.
I guess I'll give it a go next time I wake up at 4am. 
Antwortete im Thread
@hack13 I have a #wireguard entrypoint in a #vps and connect through it to my #homeserver
Currently have:
#pihole
#homeassistant
#esphome
#mstream
#gonic
#WoodpeckerCI worker
And #caddy as reverse proxy
Antwortete im Thread
@rae This is the way!
My setup is very similar to your plan. I have 4 VMs on my public VLAN: #Headscale, #PocketID, Podsync and #Caddy as a reverse proxy.
Like your plan, all my other services are only accessible via #Tailscale. So, I cut the Tailscale server dependency
Gemini realizing my nerd factor suggested the following text on my index.html : "This website is running on a #caddy server inside a #proxmox lxc ... Served securely through a #cloudflare tunnel." I found it silly, but used it.
Infosec Worrier · Blocking AI BotsBlocking bots # Running a website on minimal hardware has become somewhat of an issue caused by agressive scraping especially from the AI corporations that want your information to sell as theirs.
Hello, I’m hosting a #Vaultwarden server behind #Caddy 2.10 and made the following test:
Tuning Caddy to allow only #PQC curves:
tls {
curves x25519mlkem768
}
Trying to connect with #Firefox Mac -> OK
Trying to connect with #Bitwarden #android client -> Fail
Without the #TLS tuning, the Bitwarden Android client will happily connect to the server.
Is it a problem with the Bitwarden Android client or with Android, or both?
This week I learned to deploy #Crowdsec in my #homelab:
- CrowdSec LAPI on an LXC in my private VLAN
- Caddy-bouncer to protect my public servives
- CrowdSec-firewall-bouncer-iptables on my 2 #Proxmox nodes
- CrowdSec agent for all my public VMs and important VMs/LXCs
Of course, I created an #Ansible role to deploy the agent on my multiple hosts/VMs/LXCs using a certificate and a custom port, 8080 is a busy port :-)
Yes, it’s overkill :-)
#infosec #selfhosting #cybersecurity #caddy
Fortgeführter Thread
honestly there are probably several sanity/neatness benefits to "/opt/{app/{version}/db.sqlite"
it's just whether a #caddy config reload will still respond to inflight requests or if it'll drop them during a reload.
and then I guess you could use a shell script to say "if the current caddy config is 3000, the next server should listen on 4000" and build two systemd services (one for evens, one for odds) to let the systemd services fully start (or fully gracefully shut down?)
If I don't want to use #Ansible and I'll only use #Terraform if I'm being paid to, what are my other options if I want to say, deploy #Caddy plus some kind of Fedi server and have it repeatable?
It looks like Jet was an alternative but the creator ran out of steam.
[I realise I am basically asking for #Docker but I would like to try something else]
Fortgeführter Thread
Ha! I was able to get at least Forgejo configured with Pocket ID!
I thought I had to rebuild my Caddy container simply because I was misunderstanding how to properly configure it, but I don't actually need that. Interesting enough, the solution hit me in the head while I was brushing my teeth. 
Okay, now let's see which other services accept OAUTH2. 
Blog post about how FrankenPHP is now officially supported by the PHP Foundation
les-tilleuls.coop/en/blog/fran...
#PHP #FrankenPHP #Symfony #Drupal #Laravel #Wordpress #Caddy
RE: https://bsky.app/profile/did:plc:k3jkidzfkcdpsoxbisvuxz4f/post/3lpbmpak3pk2z