This seems too straightforward, what’s the catch?

Like how secure is it? Should I be turning it off (and disabling the port forwarding) when not using it?

Do I need any additional security? Mainly just want to use it for Jellyfin

Thanks

  • Douppikauppa@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    I found the practical use cases helpful, probably should expand that cookbook.

    E.g. I’ve found this sort of construct helpful (not sure how safe using {host} here is though):

    app.example.com, another.example {
       reverse_proxy unix//srv/backend/{host}/server.socket
    }
    

    It is hard to understand the whole thinking behind the config system, with directives, matchers, placeholders, invisible reordering of rules, and all the other concepts. And to add to the complication, Caddyfile and API are completely distinct systems and it is not very clearly explained [that one really ought to be using Caddyfile and ignoring the API for most use cases]. And that distros do ship Caddyfile-based systemd service now (some also API-based, and perhaps with root-only control socket to add to the confusion).

    I did dig into it to really understand how it works but that took a couple of weeks to digest, which is a lot for someone who only needs a simple server/proxy.