Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Caddy v2.5.0

github.com

Post reply on HN
Print view View original

101–110 of 115 posts

Re: Show HN: Caddy v2.5.0

#101

Post by goodpoint »

glasshug wrote: post #70
goodpoint wrote: post #69

I'd rather use something that can be packaged and maintained properly by distributions: https://repology.org/project/caddy/versions I use distributions because I care about security and I'll be downvoted to oblivion for saying this.

Yeah, if you're looking for a package, you'll want to stick to the Cloudsmith .deb since it's bound to Caddy's GitHub release workflow so guaranteed to stay up-to-date: https://cloudsmith.io/~caddy/repos/stable/packages/ P.S., from the guidelines: > Please don't comment about the voting on comments. It never does any good, and it makes boring reading. edit: and an official response https://news.ycombinator.com/item?i…

Pulling packages from sources outside of your distribution is very risky for security, availability and even legal compliance.

No thanks.

Re: Show HN: Caddy v2.5.0

#102

Post by francislavoie »

figassis wrote: post #98
mholt wrote: post #8

Francis definitely gets to claim the "Show HN" on this one, as he authored more commits to Caddy during this timeframe than I did: https://github.com/caddyserver/caddy/graphs/contributors?fro... He and several other maintainers, community helpers, distribution team members, and sponsors go a long way to making this project tick. Thanks for all you do!

Caddy is my server/proxy of choice. It replaced Traefik, but I have one complaint. It looks like the documentation if very outdated. The examples in the official docs or elsewhere on the internet never work, and I always find myself ging to docker hub and then browsing the source for hints of the correct configuration. This happens especially when configuring letsencrypt or zerossl and the name of the properties keep…

Could you be more specific about these complaints? What examples don't work? We can't work on improving the docs if we don't get specific and actionable feedback. The docs are found at https://github.com/caddyserver/website if you want to propose any changes.

Re: Show HN: Caddy v2.5.0

#103

Post by francislavoie »

tpetry wrote: post #100
mads wrote: post #99

Earlier quoted context omitted.

I agree. I really liked Caddy, when I used it a while back, but the documentation did stand out as being particularly in need of some love.

It‘s in this state since v2 has been released. You will also find either trivial examples for the simple Caddyfile format or the very complex json format. Very often I have to try for a very long time whether a json configuration is available for Caddyfile - basicslly googling 30+ min.

Could you be more specific about these complaints? What examples don't work? We can't work on improving the docs if we don't get specific and actionable feedback. The docs are found at https://github.com/caddyserver/website if you want to propose any changes. You can also come ask for help on the forums https://caddy.community if you can't find what you're looking for.

Re: Show HN: Caddy v2.5.0

#105

Post by francislavoie »

hda111 wrote: post #104

Why isn’t caddy using the lego library for ACME and does their own stuff? It seems lego has better support for all kind of providers.

Because Lego maintainers wouldn't budge when Caddy needed changes made to increase ACME reliability. Matt wrote his own implementation https://github.com/mholt/acmez and started using that in Caddy soon after. There's a deeper explanation here: https://github.com/caddyserver/certmagic/issues/71

Re: Show HN: Caddy v2.5.0

#106

Post by hda111 »

francislavoie wrote: post #105
hda111 wrote: post #104

Why isn’t caddy using the lego library for ACME and does their own stuff? It seems lego has better support for all kind of providers.

Because Lego maintainers wouldn't budge when Caddy needed changes made to increase ACME reliability. Matt wrote his own implementation https://github.com/mholt/acmez and started using that in Caddy soon after. There's a deeper explanation here: https://github.com/caddyserver/certmagic/issues/71

Interesting. I will have to try it out. From my experience lego is not very reliable so I understand their point.

Re: Show HN: Caddy v2.5.0

#107

Post by mholt »

hda111 wrote: post #106
francislavoie wrote: post #105

Earlier quoted context omitted.

Because Lego maintainers wouldn't budge when Caddy needed changes made to increase ACME reliability. Matt wrote his own implementation https://github.com/mholt/acmez and started using that in Caddy soon after. There's a deeper explanation here: https://github.com/caddyserver/certmagic/issues/71

Interesting. I will have to try it out. From my experience lego is not very reliable so I understand their point.

Yeah, lego's API and unreliability were the ultimate driving factors behind writing my own ACME stack. Actually, lego was originally commissioned for the Caddy project -- but then Caddy's needs evolved to having to support enterprises with tens-of-thousands of domains, and lego crippled under that responsibility due to diverging priorities. Lego is primarily used by Traefik now, and Caddy uses CertMagic+ACMEz to provide more robust, reliable certificate management that scales well.

I can guarantee CertMagic+ACMEz is the best cert management available in the ecosystem. It won't let you down.

Re: Show HN: Caddy v2.5.0

#109

Post by sgt »

evv wrote: post #73
sgt wrote: post #44

Earlier quoted context omitted.

I'm a heavy nginx user - there's not much that I haven't already done with it and I know the documentation quite well. Why would someone like me change to Caddy? I can see there are some NGINX Plus features that are free in Caddy.

I wouldn't put effort into changing if you have no troubles with nginx. Caddy has some neat features like live-configuration and built in LetsEncrypt. Plus the JSON configuration is a great idea, once I get it working. The real reason is the thing you highlighted: "I can see there are some NGINX Plus features that are free in Caddy." Sadly it seems that NGINX is now crippleware. Personally I find it risky to depend o…

You could also see it another way - nginx has to make money to fund further development. By taking features that are not critical to 90% of users, and making them paid features, you help ensure the longevity of the project. This could be a good thing.

Re: Show HN: Caddy v2.5.0

#110

Post by francislavoie »

number6 wrote: post #94
evv wrote: post #73

Earlier quoted context omitted.

I wouldn't put effort into changing if you have no troubles with nginx. Caddy has some neat features like live-configuration and built in LetsEncrypt. Plus the JSON configuration is a great idea, once I get it working. The real reason is the thing you highlighted: "I can see there are some NGINX Plus features that are free in Caddy." Sadly it seems that NGINX is now crippleware. Personally I find it risky to depend o…

Back in the days, there was an issue with caddy regarding having to pay for it if you bundle some plugins with it. I can't remember now - must have been years ago. This is why I ultimately landed at traefik and nginx as my go-to setup. Is this still the case?

No. See https://github.com/caddyserver/caddy/issues/2786

And to be clear, only builds produced by the official Caddy website used to be commercially licensed (not anymore). But the code has always been open source, and you could always build from source for free for commercial use.

Post reply on HN