Caddy on port 4533
reddit / selfhosted

----------------------------------------------------------------------
haric0 · 2023-11-14 13:30

Hello everyone! Quick backstory.
I run Navidrome exclusively on my server, and have been for a while
with Nginx and certbot. About a month ago, Nginx and certbot just…
stopped. Be it a bad cert, or something else, I decided to purge both
from my system.

I am looking into Caddy for its simplicity and ssl. I was look through
the documentation because I don’t want to open ports 80 and 443. I
have a dn from duckdns too.
Is there a guide somewhere about how to use Caddy on a different port,
or am I looking at it wrong?
Thank in advance!

----------------------------------------------------------------------
FibreTTPremises · 2023-11-14 14:59

[Yes](https://caddyserver.com/docs/caddyfile/options#https-port), but
if you're not using a DNS-01 ACME challenge to generate a TLS
certificate (you're not, since you can't control your domain's DNS),
you'll need to have port 80 (for HTTP-01) or 443 (for TLS-ALPN-01)
open.

In any case, you're not going to gain much security by obscuring which
port you're using for web traffic, I would (and do) use the default
HTTP ports.

----------------------------------------------------------------------
thekrautboy · 2023-11-14 15:07

> Is there a guide somewhere about how to use Caddy on a different
port

Why not look at the Caddy documentation?

https://caddyserver.com/

And for support https://caddy.community/

----------------------------------------------------------------------
thekrautboy · 2023-11-14 15:15

> if you're not using a DNS-01 ACME challenge to generate a TLS
certificate (you're not, since you can't control your domain's DNS)

Why cant they control the domains DNS? Caddy has a plugins for many
DNS providers, DuckDNS too. With that OP can use dns01-challenge just
fine.

----------------------------------------------------------------------
certuna · 2023-11-14 22:58

You can always run it on port 443 for a few seconds to refresh the
certs and then revert to another port for 3 months until they need to
be renewed again.

----------------------------------------------------------------------
FibreTTPremises · 2023-11-15 03:59

You're right, the only DDNS service I've ever used was NoIP, so I
assumed all DDNS providers disallows you from creating DNS records for
your subdomain (other than the one A record).

In fact, only DuckDNS, Dynv6, and DDNSS seem to be supported by Caddy,
because they're the only ones providing TXT record support.

----------------------------------------------------------------------
thekrautboy · 2023-11-15 05:07

More are supported than just those. DeSEC for example is a excellent
free and non-profit provider that offers subdomains and also DNS
management.

https://github.com/orgs/caddy-dns/repositories