Selfhosted

62398 readers

742 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Looking to move from Caddy (lemmy.dbzer0.com)

submitted 1 week ago by confusedpuppy@lemmy.dbzer0.com to c/selfhosted@lemmy.world

45 comments fedilink hide all child comments

Recently it's come to my attention that Caddy has an AI sponsor so I have been looking at moving away from Caddy.

I'm currently looking for another reverse proxy to use in place of Caddy. For TLS I am looking into using CertBot and it appears there's a module (https://github.com/desec-io/certbot-dns-desec) I can use that works for https://desec.io/ to handle my certs.

I have two questions, the first is about CertBot. Since Caddy is handling my certs automatically, how often would I want to renew my certs? Desec.io has this command to obtain a cert:

certbot certonly \
     --authenticator dns-desec \
     --dns-desec-credentials /etc/letsencrypt/secrets/$DOMAIN.ini \
     -d "$DOMAIN" \
     -d "*.$DOMAIN"

Would I be required to run the same command periodically to renew my cert?

My second question is a bit more open ended. I am looking to hear any suggestions or experiences about different reverse proxies that are preferably free of AI. There is a list here with some suggested alternatives: https://codeberg.org/ethical-foss/open-slopware#web-servers

you are viewing a single comment's thread
view the rest of the comments

[–] Devnullit@lemmy.dbzer0.com 0 points 6 days ago (1 children)

You can serve static pages by using the error page config line with monitor uri

listen static-file bind :80 monitor-uri / errorfile 200 /usr/local/etc/haproxy/errors/200.http

I also just use acme certbot (setup via puppet letsencrypt module) to do the certs and there's a restart haproxy post script on cert update

[–] lemmyvore@feddit.nl 2 points 6 days ago (1 children)

I would argue that's a bit of a perversion 😃 but on the other hand if it can serve my static page... I'll have to reconsider HAProxy for my stuff. Thanks!

[–] Devnullit@lemmy.dbzer0.com 1 points 6 days ago

Haha I get it, something something doing it because we could,.... But never ask if we should. But it's a fun trick with haproxys features, you could probably also do something with acls and or lua too if you wanted to be fancy