- Not only is Caddy the world leader in certificate automation, it also sports a fully-featured PKI suite for your own fully-automated internal PKI and private CAs. + Not only is Caddy the industry leader in certificate automation, it also sports a fully-featured PKI suite for your own fully-automated internal PKI and private CAs.
-+ +
+ Powered by open source Smallstep libraries, Caddy becomes a self-managing certificate authority.
+
localhost {
+ respond "Hello from HTTPS!"
+}
+
+192.168.1.10 {
+ respond "Also HTTPS!"
+}
+
+http://localhost {
+ respond "Plain HTTP"
+}
+ + If you configure sites with local or internal addresses, Caddy will serve them over HTTPS using a locally-trusted certificate authority with short-lived, auto-renewing certificates. It even offers to install your unique root into your local trust stores for you. +
++ Caddy lets you define as many CAs as you need. Root and intermediate keys are generated automatically, and intermediates are renewed before they expire. +
++ Deploy an instance to act as an ACME server. Then other Caddy instances can use it for their certificates. +
+{
+ pki {
+ ca corporate {
+ name "Our Corporation Authority"
+ }
+ }
+}
+
+internal.example.com {
+ # ACME endpoint: /acme/corporate/directory
+ acme_server {
+ ca corporate
+ }
+}{
+ "apps": {
+ "tls": {
+ "certificates": {
+ "automate": [
+ "example.com",
+ "sub.example.com",
+ "example.net"
+ ]
+ }
+ }
+ }
+}Caddy is more than just a web server. For example, this config is all it takes to obtain and renew certificates for a set of domain names.
@@ -288,23 +377,9 @@ Providing a unified configuration, on-line config API, and automatic documentation for all apps, Caddy is nearly infinitely extensible. Thanks to its unique modular architecture, we can offer unlimited features without bloating the code base. -->{
- "apps": {
- "tls": {
- "certificates": {
- "automate": [
- "example.com",
- "sub.example.com",
- "example.net"
- ]
- }
- }
- }
-}