Caddy Reverse Proxy Configuration

Caddy handles TLS automatically via Let's Encrypt, making it the simplest way to add HTTPS to a reverse proxy. Generate your Caddyfile here and deploy in minutes.

One line

Caddy obtains and renews certificates automatically, so a reverse proxy site is just a hostname and an upstream.

example.com {
    reverse_proxy 127.0.0.1:3000
}

Forwarded headers

Caddy sets X-Forwarded-For, X-Forwarded-Proto and X-Forwarded-Host for you, and passes the original Host header through by default.

Open the Reverse proxy generator

Frequently asked questions

Do I need to configure HTTPS in Caddy?

No. For a public hostname that resolves to the server, Caddy provisions a certificate and redirects HTTP to HTTPS on its own.

How do I proxy several apps?

Use one site block per hostname, or handle_path blocks to route path prefixes to different upstreams.

Guides

• Nginx Reverse Proxy Configuration
• Caddy Reverse Proxy Configuration
• Nginx Static Site Configuration
• Caddy Static Site Configuration
• Nginx + PHP-FPM Configuration
• Caddy + PHP-FPM Configuration
• Nginx SSL/TLS Configuration
• Nginx Load Balancer Configuration
• Caddy Load Balancer Configuration
• Nginx Rate Limiting Configuration
• Nginx Security Headers Configuration
• Caddy Security Headers Configuration
• Nginx Gzip Compression Configuration
• Nginx Caching Configuration
• Caddy HTTPS Redirect Configuration
• Nginx WebSocket Proxy Configuration
• Nginx Content-Security-Policy Header
• Block Bad Bots and Scanners in Nginx
• fail2ban for Nginx
• nginx.conf Best Practices
• Nginx Location Regex Tester
• Deploy Nginx Config with GitHub Actions
• Nginx CORS Headers Configuration
• Nginx Cache-Control Headers Configuration
• Nginx 301 Redirect Map Configuration
• robots.txt, Sitemap and security.txt
• Apache .htaccess Configuration
• Docker Compose and Dockerfile Configuration
• systemd Service and Timer Configuration
• Cron Expression Explainer
• SSH Hardening with sshd_config
• Linux Firewall Rules: ufw, nftables and iptables
• Glob Pattern Tester
• Analysing Nginx Access Logs with awk
• Subnet Mask and CIDR Calculator
• VLAN Configuration on Linux
• Static Routes and Policy Routing on Linux
• NAT and Port Forwarding with nftables
• DHCP Server Configuration
• BIND Zone File Example
• WireGuard Server and Client Configuration
• A Simple IP Plan for Your Home Network