Caddy

Automatic HTTPS reverse proxy for self-hosted apps

oss-osi-approved full guide featured

Overview

Caddy simplifies TLS termination and reverse proxying. Almost every self-hosted coworking stack benefits from a hardened reverse proxy in front of apps.

At a glance

Field	Value
Categories	`developer-platform`, `security-compliance`
Deployment	`self-hosted`
License class	oss-osi-approved (`Apache-2.0`)
Cost model	`free-self-hosted`
Implementation difficulty	`moderate`
Maintenance burden	`medium`
Maturity	`stable`
Verification	`partially-verified` (2026-07-17)

Cost reality

Free software; optional commercial support/licenses for some advanced features historically—verify current.

Pricing and free-tier limits change frequently; re-check official pricing before budget decisions.

Tasks reduced or augmented

Software does not replace community or ops staff. It may reduce or augment:

TLS termination
Routing multiple apps on one host

Human oversight still needed

Config reviews
HTTP security headers

Data held

access logs if enabled
certificates
Personal data: no / limited
Payment data: no / not primary

Risks

Area	Notes
Vendor lock-in	Evaluate export formats and API completeness before deep customization.
Security	Apply updates promptly; restrict admin access; enable TLS.
Compliance	Operator remains responsible for privacy and local regulatory obligations.
Licensing	Confirm license fits commercial coworking use.
Operational	Plan backups, monitoring, and a restore drill before production use.

Coworking fit

Roles: technical-operator

Workflows: multi-site-rollout, incident-response

Problems: self-host-for-data-control, privacy-compliance

Smallest useful experiment

Put Caddy in front of one staging app with automatic HTTPS and access logs disabled or rotated.

Typical time to first value: 1–3 days

Implementation guide

See the human-written implementation guide.

Verification

Status: partially-verified
Last reviewed: 2026-07-17
Sources:

Seed entry compiled from official project sites and repositories. Re-verify pricing, license text, and feature claims before production decisions. Star counts and free-tier numeric limits intentionally omitted unless verified at review time.