Caddy

Caddy at a glance

Caddy is a modern open-source web server and reverse proxy known for automatic HTTPS out of the box. Caddy ships regular releases plus security fixes; as an internet-facing server that manages its own certificates, keeping it current matters.

For admins Caddy's headline feature — automatic TLS via ACME — makes it easy to run securely, but the certificate storage and the admin API are then security-critical; keep the admin endpoint off the network. Updates are usually low-risk (swap the binary/container, reload), though major jumps can bring Caddyfile or config changes — read the notes. Plugins compiled into custom builds have their own versions. After upgrading, verify sites and certificate renewal. Caddy's sane defaults (modern TLS, HTTP/2+3) reduce misconfiguration risk, but keep the config in version control. Track the version and its support status.