Hacker News Reader

Comment by kaptainscarlet | Hacker News Reader

Caddy sounds like the go to tool for people who care a lot about getting things done. It's time for me to try it.

A coworker of mine dislikes it as it bundles everything into a single binary. For example, to have ACME DNS-01 challenges for certificate issuance working, I need to compile in a Google DNS-specific plugin.

But then it... just works. Try the same with most other web servers/proxies and you're in for a world of pain. Having this much functionality bundled into a single binary is as much a curse as it is a blessing.

That said, having your own little 'Cloudflare Workers' in the form of Nginx Unit with wasm sounds great. Not sure Caddy can do that.

For me, the promise of Caddy and especially tools around it like FrankenPHP make the "everything in a single binary" idea the MORE enticing option, not less.

Sure we already have repeatable infrastructure, containers, etc. but I also love the idea of just building and shipping a PHP app binary that includes the webserver. It makes server provisioning even less of a priority, especially if I have reasons to not use serverless or PaaS tools.

Having a single binary is definitely what drives me to use certain software, Deno is one of them.

It's great until you want to include a non-standard plugin and need to compile your own binaries.

Now that single binary deployment requires you to compile the software yourself. Caddy has nice tooling for this but it'd be far more convenient to just drop a dll/so file in the right directory.

Single binary deployments are great if someone else did the compiling for you. If you need to compile yourself it truly does not matter if you need to ship a single binary or a directory or whatever.

If you want to see a real-life example of what Caddy can do, feel free to check the configuration of my iss-metrics project:

https://github.com/Radiergummi/iss-metrics/blob/main/caddy/C...

I was in the same boat as you and wanted to try out what Caddy is capable of. I was immediately convinced. So many features, where you expect them. Consistent configuration language. Environment interpolation, everywhere. Flexible API. It’s really all there.

From the first glance it doesn't look convincingly better than a generic and manually polished nginx configuration. Are there any other benefits to Caddy?

It does all the letsencrypt stuff for you - certbot is not a massive hassle if you're just serving the one domain of course but I really liked it for that when I was setting up a redirect server (corps do love buying TheirBrand.everytld haha)

Set the config up with CI/CD and can now just edit the config and git push knowing Caddy will just handle the rest

Seems to be a middleground between doing certs on a small scale with cronjobs and a fully fledged automated Kubernetes cluster.

it is a total displacement for the former and stupidly simple compared to the either; gold standard 'just works'

If you choose to start the project with docker compose, you’ll notice how it will immediately bring up a fully functional reverse proxy setup with TLS support on localhost; set the SITE_DOMAIN environment variable to your proper domain instead, and you’ll find that configured as well, along with a proper, ACME-issued certificate. Add a bit more effort, and you’ll also get mTLS for all services automatically.

All of this is more or less doable with nginx, I’ve done it often enough. But read the Caddyfile and tell me this isn’t miles ahead in clarity.

Better Docker integration out of the box, I guess.

I don't use docker so I don't care.

It's a fine project right up to the point of you needing additional functionality that's split into one of the plugins. Since Go applications do not support proper .so in practice, you have to build your own binaries or rely on their build service, and this puts the responsibility of supporting and updating such custom configuration on you.

So no setting up unattended-upgrades and forgetting about it.

I think that's what https://caddyserver.com/docs/command-line#caddy-upgrade (and the following commands) are for ;)

> experimental

also totally non-standard, apt unattended-upgrades won't be doing that for you.

sure you can do a cronjob, but, non-standard

I recently setup a Flarum forum and the instructions mentioned Apache and Nginx. I sighed until I saw Caddy immediately below.

Caddy really is the most pleasant webserver software I’ve ever used.

Eh, it's a bit over hyped imo although I do like the config format and built-in acme. My production clusters all run nginx though and give me minimal fuss with a lot of flexibility.

Reply on news.ycombinator.com