[OpenIndiana-discuss] Heads Up: New Reverse Proxy for the OpenIndiana Infrastructure

[Till Wegmueller]

Hi Volker

The configuration is in an Open Repository.

https://github.com/Toasterson/openindiana-reverse-proxy-config

The Caddyfile has all the option in it. It's taken straight from the 
official Caddy docs. Building caddy work out of the box as it is tested 
on illumos to build. simply using the build from source instructions. 
Service method and xml are in the repo too under svc adapted from the 
nginx config.

It's something I quickly whipped up and it can be secured more by 
running caddy as webservd user for example.

But thats for somebody to take up. I am happt to coach on getting a 
package into oi-userland but I want somebody else than me to do it.

-Till

On 18.03.25 17:10, Volker A. Brandt wrote:
> Till Wegmüller writes:
>> Our previous Reverse Proxy setup powered by nginx and dehydrated had
>> some issues renewing certificates. With the new update to dehyudrated it
>> has unfortunately become impossible to use it, So I had to look for a
>> new way to get this to work easily and reliably.
>>
>> After looking at a few candidates the one that managed to Solve all use
>> cases the easiest was Caddy. The reverse Proxy with builting Let's
>> Encrypt support.
>>
>> I have today migrated all configs from nginx to Caddy and moved all
>> sites to it.
> 
> Is there a documentation of the configuration somewhere?  Maybe this
> could be useful for others...
> 
>> All services are working as expected.
>> If however there is an edge case I did not manage to test that now
>> fails, please let me know.
> 
> Thank you for doing this work for the OpenIndiana community!
> 
> 
> Cheers -- Volker