About Caddy
Caddy is an open source web server written in Go. It turns on HTTPS for every site by default, obtaining and renewing certificates without manual steps. It can also act as a reverse proxy and a file server.
What it does
Caddy obtains and renews TLS certificates for your sites automatically. Its on-demand TLS feature issues certificates for customer-owned domains as traffic arrives. Configuration can be written in a Caddyfile or exported as JSON and changed through a REST config API.
Key features
- Automatic certificates for every site by default
- On-demand TLS for customer-owned domains
- Configuration through a Caddyfile or a JSON API
- HTTPS on localhost using a local certificate authority
- TLS defaults that the site says meet PCI, HIPAA and NIST checks
Who it's for
Caddy suits developers and operators who want HTTPS handled automatically, from a personal site to a fleet of servers. SaaS teams that serve many customer domains may find its on-demand TLS useful.
Pricing and good to know
Caddy is free software under the Apache-2.0 license. The project relies on sponsorships for ongoing development, and the site describes benefits for sponsoring businesses. Caddy is designed to manage certificates reliably at large scale, according to the site.
Highlights
- Automatic certificates for every site by default
- On-demand TLS for customer-owned domains
- Configuration through a Caddyfile or a JSON API
- HTTPS on localhost using a local certificate authority
- TLS defaults the site says meet PCI, HIPAA and NIST checks
