this post was submitted on 23 Apr 2025
25 points (93.1% liked)

Selfhosted

46265 readers
196 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
25
Anyone use Caddy w Porkbun here? Looking for help after updating Caddy… (mander.xyz)
submitted 1 day ago by ocean@mander.xyz to c/selfhosted@lemmy.world
11 comments fedilink hide all child comments
 

I’m slightly freaking out. I recently ran some updates on my Linux Mint server computer. Afterwards, my modules, like Porkbun, had been removed and kept giving a 400 error when trying to add-package. Without the porkbun dns module, caddy can’t pass the keys and nothing with reverse proxy from me. The porkbun git page mentions some upgrade to the DNS system a few days ago that they said was connected to this. Any ideas of what to do? Do I downgrade Caddy until they resolve? I’m not the most computer savvy so I appreciate the help.

you are viewing a single comment's thread
view the rest of the comments
[–] sxan@midwest.social -5 points 1 day ago (2 children)

I've never heard of Porkbun, but it doesn't sound like a caddy issue. Let's Encrypt requires being able to resolve the DNS name you're requesting a cert for, and to be able to connect to your web service and fetch a secret to prove you own the domain. If porkbun does something like punch a hole in your LAN firewall and let in http traffic, then porkbun is the problem. Not Caddy.

[–] sugar_in_your_tea@sh.itjust.works 7 points 1 day ago (1 children)

and to be able to connect to your web service and fetch a secret to prove you own the domain

This part isn't true, you can use DNS challenge and they don't need to connect to your service. I have several services on my LAN that have never been accessible from the internet that have Let's Encrypt certs.

That sounds like the method OP is trying to use.

[–] sxan@midwest.social 1 points 16 minutes ago

Hmmm. You're right; it's a mechanism I've never used because it's more work and it is slower, and I forget about it. All you need to do is be able to prove you own the domain, and control over the DNS record is certainly viable.

Is that what Porkbun does? Because Caddy can automate the http method, but not the DNS challenge method, because both require a handshake and that's updating the DNS record.

[–] just_another_person@lemmy.world 1 points 1 day ago (1 children)

Then why did you comment? 😂

[–] sxan@midwest.social 1 points 13 minutes ago

Because they were wondering if it was a Caddy issue, and I'll bet real money it isn't.

Being able to exclude components from being a possible source of the issue is critical to problem solving.