Tag: ssl

Get Caddy running as a reverse proxy in Docker — automatic HTTPS, Caddyfile config, and Docker Compose setup in under 10 minutes.

Your reverse proxy only has the leaf cert, not the intermediate. Here's why that kills half your connections.

TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.

Certbot isn't the only ACME client. Explore Caddy, acme.sh, lego, and Step CA — with practical examples for wildcard certs and DNS-01 challenges.

Certificate pinning and HPKP explained: what they are, why HPKP destroyed itself, and modern alternatives like CAA records and Certificate Transparency.

Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.

Incomplete cert chains, wrong order, self-signed certs. How to diagnose trust failures with openssl s_client.

Certs expire silently. Check expiry with openssl, automate renewal checks with cron, get alerts before disaster.

Certificate pinning locks your app to a specific TLS cert so MITM attackers can't swap in a rogue CA — how it works and when to use it.