mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,5 Tsd.
aktive Profile

#caddy

2 Beiträge2 Beteiligte0 Beiträge heute
panigrc<p><span class="h-card" translate="no"><a href="https://cyberfurz.social/@hack13" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>hack13</span></a></span> I have a <a href="https://mastodon.social/tags/wireguard" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>wireguard</span></a> entrypoint in a <a href="https://mastodon.social/tags/vps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>vps</span></a> and connect through it to my <a href="https://mastodon.social/tags/homeserver" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>homeserver</span></a> <br>Currently have:<br><a href="https://mastodon.social/tags/pihole" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>pihole</span></a><br><a href="https://mastodon.social/tags/homeassistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>homeassistant</span></a><br><a href="https://mastodon.social/tags/esphome" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>esphome</span></a><br><a href="https://mastodon.social/tags/mstream" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>mstream</span></a><br><a href="https://mastodon.social/tags/gonic" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>gonic</span></a><br><a href="https://mastodon.social/tags/WoodpeckerCI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WoodpeckerCI</span></a> worker</p><p>And <a href="https://mastodon.social/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a> as reverse proxy</p><p><a href="https://mastodon.social/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>homelab</span></a> <a href="https://mastodon.social/tags/selfhost" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>selfhost</span></a> <a href="https://mastodon.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>selfhosted</span></a></p>
Lucas Janin 🇨🇦🇫🇷<p><span class="h-card" translate="no"><a href="https://kolektiva.social/@rae" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>rae</span></a></span> This is the way! </p><p>My setup is very similar to your plan. I have 4 VMs on my public VLAN: <a href="https://mastodon.social/tags/Headscale" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Headscale</span></a>, <a href="https://mastodon.social/tags/PocketID" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PocketID</span></a>, Podsync and <a href="https://mastodon.social/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> as a reverse proxy. </p><p>Like your plan, all my other services are only accessible via <a href="https://mastodon.social/tags/Tailscale" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Tailscale</span></a>. So, I cut the Tailscale server dependency</p>
Lou Smith<p>Gemini realizing my nerd factor suggested the following text on my index.html : "This website is running on a <a href="https://mstdn.social/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a> server inside a <a href="https://mstdn.social/tags/proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>proxmox</span></a> lxc ... Served securely through a <a href="https://mstdn.social/tags/cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cloudflare</span></a> tunnel." I found it silly, but used it.</p>
Martin Boller :debian: :tux: :freebsd: :windows: :mastodon:<p>Another short blog post on blocking <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AI</span></a> <a href="https://infosec.exchange/tags/LLM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>LLM</span></a> <a href="https://infosec.exchange/tags/Bots" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Bots</span></a> that slow down a website. Using <a href="https://infosec.exchange/tags/NGINX" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NGINX</span></a>, but easily adaptable to <a href="https://infosec.exchange/tags/ApacheWebServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ApacheWebServer</span></a> <a href="https://infosec.exchange/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> etc</p><p><a href="https://www.infosecworrier.dk/blog/2025/07/botblocker/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">infosecworrier.dk/blog/2025/07</span><span class="invisible">/botblocker/</span></a></p>
Uckermark MacGyver :nonazi:<p>Switched this server to my new <a href="https://hub.uckermark.social/tags/Hetzner" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Hetzner</span></a> Object Storage backend. Also switched from <a href="https://hub.uckermark.social/tags/NGINX" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NGINX</span></a> as reverse proxy to <a href="https://hub.uckermark.social/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a>.</p>
16180339887<p>or maybe i'll try iocaine:<br><br><a href="https://iocaine.madhouse-project.org/howto/fronting-iocaine-with-caddy/" rel="nofollow noopener" target="_blank">https://iocaine.madhouse-project.org/howto/fronting-iocaine-with-caddy/</a><br><br><a href="https://gts.tuttipazzi.cyou/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> <a href="https://gts.tuttipazzi.cyou/tags/iocaine" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Iocaine</span></a> <a href="https://gts.tuttipazzi.cyou/tags/aipoisoning" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AIPoisoning</span></a></p>
patpro<p>Hello, I’m hosting a <a href="https://social.patpro.net/tags/vaultwarden" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Vaultwarden</span></a> server behind <a href="https://social.patpro.net/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> 2.10 and made the following test:</p><p>Tuning Caddy to allow only <a href="https://social.patpro.net/tags/pqc" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PQC</span></a> curves:</p><pre><code> tls { curves x25519mlkem768 } </code></pre><p>Trying to connect with <a href="https://social.patpro.net/tags/firefox" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Firefox</span></a> Mac -&gt; OK<br>Trying to connect with <a href="https://social.patpro.net/tags/bitwarden" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Bitwarden</span></a> <a href="https://social.patpro.net/tags/android" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>android</span></a> client -&gt; Fail</p><p>Without the <a href="https://social.patpro.net/tags/tls" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TLS</span></a> tuning, the Bitwarden Android client will happily connect to the server.</p><p>Is it a problem with the Bitwarden Android client or with Android, or both?</p>
Herz++<p>Alright, managed to make <a href="https://furry.engineer/tags/Anubis" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Anubis</span></a> + <a href="https://furry.engineer/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> + <a href="https://furry.engineer/tags/Podman" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Podman</span></a> <a href="https://furry.engineer/tags/Quadlets" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Quadlets</span></a> work.</p><p>I was having some issues, but those were caused by broken DNS resolution between containers because my VPS was still, somehow, using long deprecated CNI instead of Netavark.</p>
Lucas Janin 🇨🇦🇫🇷<p>This week I learned to deploy <a href="https://mastodon.social/tags/Crowdsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Crowdsec</span></a> in my <a href="https://mastodon.social/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>homelab</span></a>:</p><p>- CrowdSec LAPI on an LXC in my private VLAN <br>- Caddy-bouncer to protect my public servives<br>- CrowdSec-firewall-bouncer-iptables on my 2 <a href="https://mastodon.social/tags/Proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Proxmox</span></a> nodes <br>- CrowdSec agent for all my public VMs and important VMs/LXCs </p><p>Of course, I created an <a href="https://mastodon.social/tags/Ansible" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Ansible</span></a> role to deploy the agent on my multiple hosts/VMs/LXCs using a certificate and a custom port, 8080 is a busy port :-)</p><p>Yes, it’s overkill :-)<br><a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>infosec</span></a> <a href="https://mastodon.social/tags/selfhosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>selfhosting</span></a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://mastodon.social/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a></p>
Bradley Taunt<p>I'm in the process of porting over all OpenBSD related mini-sites to <a href="https://mastodon.bsd.cafe/tags/httpd" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>httpd</span></a> running on my TinyKVM VPS.</p><p>All other web projects will be migrated to Alpine <a href="https://mastodon.bsd.cafe/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Linux</span></a>, served through <a href="https://mastodon.bsd.cafe/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> on my other VPS.</p>
Risotto Bias<p>honestly there are probably several sanity/neatness benefits to "/opt/{app/{version}/db.sqlite" </p><p>it's just whether a <a href="https://toot.risottobias.org/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a> config reload will still respond to inflight requests or if it'll drop them during a reload.</p><p>and then I guess you could use a shell script to say "if the current caddy config is 3000, the next server should listen on 4000" and build two systemd services (one for evens, one for odds) to let the systemd services fully start (or fully gracefully shut down?)</p>
Thomas Frans 🇺🇦<p>It seems like today, <a href="https://fosstodon.org/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> automatically stopped automatically renewing <a href="https://fosstodon.org/tags/SSL" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SSL</span></a> certificates.</p><p>Yes, you read that correctly. I will now scream into the void.</p><p><a href="https://fosstodon.org/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHosted</span></a> <a href="https://fosstodon.org/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHosting</span></a> <a href="https://fosstodon.org/tags/HomeServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HomeServer</span></a></p>
Adam ♿<p>If I don't want to use <a href="https://aus.social/tags/Ansible" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Ansible</span></a> and I'll only use <a href="https://aus.social/tags/Terraform" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Terraform</span></a> if I'm being paid to, what are my other options if I want to say, deploy <a href="https://aus.social/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> plus some kind of Fedi server and have it repeatable?</p><p>It looks like Jet was an alternative but the creator ran out of steam.</p><p><a href="https://aus.social/tags/AskFedi" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>AskFedi</span></a></p><p>[I realise I am basically asking for <a href="https://aus.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Docker</span></a> but I would like to try something else]</p>
Thomas Frans 🇺🇦<p>Having a home server is so much fun. Can't scan because the scanning software doesn't run on <a href="https://fosstodon.org/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Linux</span></a>? No problem, just set up the scanner to upload over SFTP to your server and serve the files using <a href="https://fosstodon.org/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a>!</p><p>I love this!</p><p><a href="https://fosstodon.org/tags/SelfHost" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHost</span></a> <a href="https://fosstodon.org/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHosting</span></a> <a href="https://fosstodon.org/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SelfHosted</span></a> <a href="https://fosstodon.org/tags/HomeServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HomeServer</span></a></p>
Risotto Bias<p>weird, I don't see any reverse proxy plugins (for <a href="https://toot.risottobias.org/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a> <a href="https://toot.risottobias.org/tags/nginx" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>nginx</span></a> or <a href="https://toot.risottobias.org/tags/apache" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>apache</span></a> ) that allow you to block user agent impersonations for known rDNS / CIDR blocks.</p><p>e.g.:</p><p>blocks.conf<br>SomeCrawler unless CIDR 8.8.8.8/8<br>OtherCrawler unless rDNS crawler.*.duckduckgo.com</p><p><a href="https://toot.risottobias.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>cybersecurity</span></a> <a href="https://toot.risottobias.org/tags/blueteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>blueteam</span></a></p>
Mauricio Teixeira 🇺🇸🇧🇷<p>Ha! I was able to get at least Forgejo configured with Pocket ID!</p><p>I thought I had to rebuild my Caddy container simply because I was misunderstanding how to properly configure it, but I don't actually need that. Interesting enough, the solution hit me in the head while I was brushing my teeth. 😁 </p><p>Okay, now let's see which other services accept OAUTH2. 🎉 </p><p><a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HomeLab</span></a> <a href="https://hachyderm.io/tags/PocketID" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PocketID</span></a> <a href="https://hachyderm.io/tags/Forgejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Forgejo</span></a> <a href="https://hachyderm.io/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a></p>
Druid<p>Blog post about how FrankenPHP is now officially supported by the PHP Foundation <a href="https://les-tilleuls.coop/en/blog/frankenphp-is-now-officially-supported-by-the-php-foundation" rel="nofollow noopener" target="_blank">les-tilleuls.coop/en/blog/fran...</a> <a class="hashtag" href="https://bsky.app/search?q=%23PHP" rel="nofollow noopener" target="_blank">#PHP</a> <a class="hashtag" href="https://bsky.app/search?q=%23FrankenPHP" rel="nofollow noopener" target="_blank">#FrankenPHP</a> <a class="hashtag" href="https://bsky.app/search?q=%23Symfony" rel="nofollow noopener" target="_blank">#Symfony</a> <a class="hashtag" href="https://bsky.app/search?q=%23Drupal" rel="nofollow noopener" target="_blank">#Drupal</a> <a class="hashtag" href="https://bsky.app/search?q=%23Laravel" rel="nofollow noopener" target="_blank">#Laravel</a> <a class="hashtag" href="https://bsky.app/search?q=%23Wordpress" rel="nofollow noopener" target="_blank">#Wordpress</a> <a class="hashtag" href="https://bsky.app/search?q=%23Caddy" rel="nofollow noopener" target="_blank">#Caddy</a><br><br>RE: <a href="https://bsky.app/profile/did:plc:k3jkidzfkcdpsoxbisvuxz4f/post/3lpbmpak3pk2z" rel="nofollow noopener" target="_blank">https://bsky.app/profile/did:plc:k3jkidzfkcdpsoxbisvuxz4f/post/3lpbmpak3pk2z</a></p>
Mauricio Teixeira 🇺🇸🇧🇷<p>Okay. Plans for putting the home lab behind Pocket ID have been postponed, until I have time and patience to properly automate a custom build of `lucaslorentz/caddy-docker-proxy` with the `greenpau/caddy-security` plugin enabled.<br><a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>HomeLab</span></a> <a href="https://hachyderm.io/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a> <a href="https://hachyderm.io/tags/PocketID" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PocketID</span></a></p>
Jonathan B ✈️🪄👨🏻‍💻<p><span class="h-card" translate="no"><a href="https://social.v.st/@quixoticgeek" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>quixoticgeek</span></a></span> It’s a proxy and web server that you can use instead of nginx or traefik (for instance) and is super easy to configure. It handles all the LetsEncrypt stuff pretty much automatically. <a href="https://caddyserver.com" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">caddyserver.com</span><span class="invisible"></span></a></p><p>I put some notes here: <a href="https://jmb.me.uk/articles/selfhosting_with_caddy_and_docker/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">jmb.me.uk/articles/selfhosting</span><span class="invisible">_with_caddy_and_docker/</span></a></p><p><a href="https://mastodon.me.uk/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>caddy</span></a></p>
CiclistaRubio<p>caddy.reverse_proxy: "{{upstream 80}}"</p><p>!=</p><p>caddy.reverse_proxy: "{{upstreams 80}}"</p><p>Für euch stundenlang getestet. (Haben wir schon Wochenende?)</p><p><a href="https://norden.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Docker</span></a> <a href="https://norden.social/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Caddy</span></a></p>