Tag: caddy

Admin blocks on nginx, Caddy, and Traefik let 2 or 3 of 13 spellings through. A forged Remote-User fooled all three. Caddy's open admin port took a new config.

Guide-style rate limits behind a CDN locked out a bystander on nginx, Caddy, and Traefik. Trusting X-Forwarded-For let a forger through 20 of 20. Fixes tested.

Seven copy-paste security headers gave nginx static files none, let Traefik overwrite an app's own CSP, and blocked self-framing. Tested configs for all three.

Same A+ before and after hardening, yet nginx drops from 25 TLS 1.2 suites to 3, and an old curve list silently strips post-quantum key exchange on all three.

Stock nginx shows its exact version on every response and hands your real cert to bare-IP scanners. We audited nginx, Caddy, and Traefik and fixed each leak.

We pinned nginx 1.31 and Caddy 2.11 to 2 CPU cores and measured both. nginx wins per core, but a bare proxy_pass started returning 502s after 28,231 requests.

Caddyfile zen vs Traefik labels-everywhere, picking a reverse proxy for self-hosted services in 2026. Real configs, real gotchas.

A practical cookbook of real-world Caddyfile patterns, reverse proxy, auth, redirects, SPA serving, rate limiting, and more.

Certbot isn't the only ACME client. Explore Caddy, acme.sh, lego, and Step CA, with practical examples for wildcard certs and DNS-01 challenges.

Apache still runs half the internet by default, not by choice. Here's why Nginx and Caddy have lapped it, and when to finally make the switch.

Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.

Run WordPress on PHP-FPM with Caddy as the web server, all in Docker Compose with automatic HTTPS and proper PHP config.