photog.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A place for your photos and banter. Photog first is our motto Please refer to the site rules before posting.

Administered by:

Server stats:

246
active users

#caddy

0 posts0 participants0 posts today

An interesting data point in the HTTP/0.9 and HTTP/1.0 switch-off that is happening. (The #httpd in #djbwares version 10 defaults to not supporting 0.9 and 1.0 unless explicitly switched on. But I am not alone.)

url.town/ is a WWW site with a 1990s WWW directory style.

You won't be able to (directly, without a protocol-upgrading HTTP proxy) use an actual 1990s WWW browser with it, though.

It doesn't speak HTTP 0.9, and it redirects HTTP 1.0 and 1.1 to HTTPS with modern ciphers that 1990s systems will not have.

There were people mooting switching off 0.9 and 1.0 in their servers at least as long ago as 2015.

It's actually happening. But because 0.9 and 1.0 are nowadays nearly 0% of all traffic (according to measurements taken in 2021), few people have noticed.

Except the people who spin up actual pre-HTTP/1.1 WWW browsers and try to use them.

IBM WebExplorer for OS/2 was released in 1994, for example,.

Continued thread

On est d'accord que si curl (avec --verbose car sans il me revoit rien) me revoit ça, c'est que ça fonctionne :

* [HTTP/2] [1] OPENED stream for https://hollo.zarchbox.fr/
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: hollo.zarchbox.fr]
* [HTTP/2] [1] [:path: /]
* [HTTP/2] [1] [accept: */*]
* [HTTP/2] [1] [user-agent: ClaudeBot]
> GET / HTTP/2
> Host: hollo.zarchbox.fr
> Accept: */*
> User-Agent: ClaudeBot
> 
* Request completely sent off
< HTTP/2 403 
< alt-svc: h3=":443"; ma=2592000
< content-security-policy: upgrade-insecure-requests
< referrer-policy: no-referrer-when-downgrade
< strict-transport-security: max-age=31536000; includeSubDomains; preload
< x-content-type-options: nosniff
< x-frame-options: SAMEORIGIN
< x-xss-protection: 1; mode=block
< content-length: 0
< date: Sat, 02 Aug 2025 07:55:09 GMT

#Caddy #ReverseProxy
Continued thread

Well, it's done. Wasn't too complicated, but I had to modify some of the reverse_proxy directives for some of my containers.

Anyway, I'm now running on #Caddy and don't have to use a rather complicated and long-running process to renew my certificates via letsencrypt.

I'll probably move from #Apache to #caddy for my Server. I'm using Apache mostly as a reverse proxy anyway, and the few HTML and PHP pages I can just move into containers too.

The built-in TLS handling might be easier for letsencrypt and I could stop using a custom DNS authentication.

I guess I'll give it a go next time I wake up at 4am. 🤷‍♂️

Hello, I’m hosting a #Vaultwarden server behind #Caddy 2.10 and made the following test:

Tuning Caddy to allow only #PQC curves:

	tls {
		curves x25519mlkem768
	}

Trying to connect with #Firefox Mac -> OK
Trying to connect with #Bitwarden #android client -> Fail

Without the #TLS tuning, the Bitwarden Android client will happily connect to the server.

Is it a problem with the Bitwarden Android client or with Android, or both?

If I don't want to use #Ansible and I'll only use #Terraform if I'm being paid to, what are my other options if I want to say, deploy #Caddy plus some kind of Fedi server and have it repeatable?

It looks like Jet was an alternative but the creator ran out of steam.

#AskFedi

[I realise I am basically asking for #Docker but I would like to try something else]

Continued thread

Ha! I was able to get at least Forgejo configured with Pocket ID!

I thought I had to rebuild my Caddy container simply because I was misunderstanding how to properly configure it, but I don't actually need that. Interesting enough, the solution hit me in the head while I was brushing my teeth. 😁

Okay, now let's see which other services accept OAUTH2. 🎉

Replied in thread

@quixoticgeek It’s a proxy and web server that you can use instead of nginx or traefik (for instance) and is super easy to configure. It handles all the LetsEncrypt stuff pretty much automatically. caddyserver.com

I put some notes here: jmb.me.uk/articles/selfhosting

Caddy Web ServerCaddy - The Ultimate Server with Automatic HTTPSCaddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go

Yesterday afternoon I've given @cryptpad a try.
Even though I don't really have a use for it, I wanted to test the installation on #freebsd.

It took only few minutes to create the jail, checkout the code, make the install and tune the configuration file.
Using #caddy as a proxy was really straightforward thanks to config examples, and they even provide an rc script for freebsd.

It's been a really long time since I've seen such a smooth and well documented install process for a non-packaged software. And I'm so happy they only provide docker as an option, not as the main (or only) supported installation method.

The senior #sysadmin in me is absolutely thrilled by the work of the #cryptpad team.
As a user I think the application is well designed and achieves the very difficult balance between secure design and usability.

Great job.

Continued thread

4) caddy:latest

The caddy image doesn't have any built-in healthcheck, and even `curl` is missing.

Luckily `wget` is available, and I use it to call Nextcloud's status page. This does check for more than the health of the caddy service itself.

Add the following in the [Container] section of the nextcloud-web.container:
...
HealthCmd=wget --quiet --spider --tries=1 cloud.example.com/status.php || exit 1
HealthStartPeriod=10s
HealthInterval=30s
HealthTimeout=5s
HealthRetries=5
Notify=healthy
...

#podman #nextcloud #quadlets #healthcheck #caddy

github.com/caddyserver/caddy-d

Hallo Leipzig!

Die #LeipzigerBuchmesse hat ihre Pforten geöffnet. Dank meinem tollen Team habe ich den Aufbau gestern geschafft und wurde sogar trotz operiertem Knie erfolgreich zu meinem traditionellen "Phoenix der Messecamper"-Foto aufs Auto und wieder runtergehoben. 📚🚘

#Autor_innenleben #Messeleben #AutorinOnTour #Phantastik #FantasyAusDeutschland #Vantasy #Vanautorin #WirSindPAN #LeipzigerBuchmesse2025 #LBM #Caddy #CaddyMaxi #CaddyCamper #Messemobil #Messecamper @volkswagen_de