caddy - pdemro.com

pdemro.com

Subscribe

caddy

A collection of 8 posts

Ghost & Caddy - Restrict admin url

Ghost & Caddy - Restrict admin url

The ghost blog doesn't have a configuration for changing the admin url. By default the admin interface and logon portal is available at https:///ghost. I tend to agree with this post in one of several GitHub issue threads asking for this feature. Hardening, defendably the most important Defense technique,

Hosting Secure Cloud WordPress with Caddy & Docker

Hosting Secure Cloud WordPress with Caddy & Docker

Some notes from implementing Wordpress with Caddy and Docker Prerequisites There are a few prerequisites before Caddy will be able to negotiate a certificate from Let's Encrypt: 1. Valid domain name that you own 2. DNS configured to point your domain to your server 3. DNS propagated For more information

Restricting Files & Paths in Caddy

Restricting Files & Paths in Caddy

I received an email today from an independent security researcher which detailed a vulnerability in pdemro.com. I am using a pretty old version of the Ghost docker image which apparently serves a directory which is a Git repository (including a .git folder). The vulnerability exploited my permissive Caddy configuration

Caddy Won't Generate a Certificate/Doesn't Load

Caddy Won't Generate a Certificate/Doesn't Load

I have spent the last few months getting familiar with Caddy and Let's Encrypt. During implementations I have learned a couple gotchas which might be helpful when Caddy doesn't work. Domain Black List If you're hosted on Azure, Amazon or other popular cloud providers, you might be issued a subdomain

GOGS: How to set up an SSH key when using Docker

GOGS: How to set up an SSH key when using Docker

Connecting to Git via SSH improves development quality-of-life via username & password prompt liberation. The gist is to replace the standard username and password prompt in git with public-key-encryption. There are a number of security benefits to moving credentials to SSH in Git in addition to the QoL improvements. I don't

Piwik Analytics for Ghost using Docker and Caddy

Piwik Analytics for Ghost using Docker and Caddy

If you want to see how many people are visiting your site you will need some kind of analytics. Piwik is great because it is open source and works well with Docker. Read on for documented steps to install Piwik with Docker and Caddy. Piwik depends on MySQL so I'm

SSL reverse proxy with Caddy, Docker and Let's Encrypt

docker Featured

SSL reverse proxy with Caddy, Docker and Let's Encrypt

After building my Ghost Docker container I wanted to make sure that everything is served encrypted over the internet at the insistence & coercion of my peers. Setting up SSL using Caddy, Docker and Let's Encrypt is simple. Read on for steps on how to accomplish this configuration. Introducing Let's Encrypt

Docker, Ghost, Free SSL with Caddy WebServer

Docker, Ghost, Free SSL with Caddy WebServer

A few comments on my experience with creating this website. The blog was built using a combination of techs which are fairly new to me * Docker software containerization platform http://www.docker.com * Nginx - web server https://www.nginx.com * Caddy web server, out-of-box encryption https://caddyserver.com * Let's