[SOLVED] Caddy and multiple subdomains/reverse proxies (lemmy.dbzer0.com)

submitted 3 days ago* (last edited 3 days ago) by UnrefinedChihuahua@lemmy.dbzer0.com to c/selfhosted@lemmy.world

10 comments fedilink hide all child comments

Hoping the brain trust can help.

Single reverse proxy? No issues at all. If I add multiple per some instructions on the caddy forums, nothing works - the docker container just continually reboots with no errors in the log.

Caddyfile:

fmd.domain.ca {
    reverse_proxy 10.179.200.199:8080
}

llama.domain.ca {
    reverse_proxy 192.168.3.199:3000
)

With only the fmd entry, works fine.

you are viewing a single comment's thread
view the rest of the comments

[-] AzuraTheSpellkissed@lemmy.blahaj.zone 7 points 3 days ago

Note that you are likely leaking a list of all your subdomains in certificate transparency logs. Some users might not want that to happen, in that case using a wildcard certificate can help, but it's either more tedious to set up (generating the cert outside of caddy) or less readable (using a Caddyfile with a single domain block for the wildcard containing a handle block per subdomains).

[-] crandall@lemmy.today 9 points 3 days ago* (last edited 3 days ago)

Its actually simpler than I expected to do the wildcard cert setup in Caddy. Its not necessary to nest everything. You can just add the wildcard block at the top, and leave the rest of the config as-is, and they will default to using the wildcard instead of individual certs.

[-] AzuraTheSpellkissed@lemmy.blahaj.zone 4 points 3 days ago

That would be great. Though I've had that not work as expected at the beginning of 2026, but maybe you are right.

[-] UnrefinedChihuahua@lemmy.dbzer0.com 3 points 3 days ago

Thanks for this. Next project to look in to.

[-] CorrectAlias@piefed.blahaj.zone 3 points 3 days ago

I user caddy-cloudflare with *.caddy files which allows me to get a signed wildcard cert for my internal subdomains. I did it for this exact reason, I didn't want to leak my internal subdomains.

this post was submitted on 20 Oct 2026

24 points (96.2% liked)

Selfhosted

63158 readers

535 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world