Caddy Web Server

Caddy v2.11.4 is now available, featuring some security patches and a few other enhancements. Thanks to all who contributed! github.com/caddyserver/ca…

The countdown to #APIPlatformCon 2026 is on! ⚡️ Incredible speakers, deep-tech talks, and... a massive surprise announcement during my opening keynote. If you are building real-time apps or exploring AI integrations, you absolutely need to be in the room. Secure your spot before tickets sell out: 👉 api-platform.com/con/2026/

We're happy to report that although AI is changing how we manage our project, our sponsorship model keeps our project healthy. Thank you, sponsors like @stripe, @framer, @zerosslHQ, and the many others who make Caddy possible! thoughtworks.com/insights/blog/…

We are pleased to be able to sponsor the @ApiPlatform Conference this year! This conference is an important hub of creative technical ideas and builders. We are seeing the Web become better because of the API Platform audience's contributions.

We are getting several reports of certificate issuance failing suddenly due to missing country in the CSR. With the help of @ZeroSSL, we're escalating an investigation with @SectigoHQ into why that is the case. We'll report back when we have some info or a potential fix.

@alexdaubois We like this. Good work.

You can't secure a project until everyone agrees where its trust boundary is. 🔐 #FrankenPHP embeds #PHP inside a #Golang and @caddyserver server, so that boundary spans Go, C, and PHP. We wrote its security model: what's untrusted (the request), what's trusted (the operator and the deployed code), and which attack surfaces FrankenPHP itself owns. For the @thephpf's Ecosystem Security Team, this is what turns our audits from guesswork into something scoped. A threat model is a security feature.

We're very excited to welcome @caddyserver as a Bronze sponsor of the #APIPlatformCon! Caddy is a secure, open-source web server that automatically manages HTTPS by default. We warmly thank them for their support. Get your ticket: api-platform.com/con/2026/ticke…

We are happy to welcome Uruky, a private and personalized search engine, as a sponsor! uruky.com

Thanks to elee1766 on our maintainer team and a generous allocation on Azure by @Microsoft for Startups (via the @GitHub Secure Open Source Fund), our build server infrastructure has been upgraded! This means our Download page should work more reliably as we scale it up.

Your Caddyfile can probably be simpler than you think. reddit.com/r/selfhosted/c…

(Agents should also not post replies. The community loses all value and purpose if humans are removed from the loop.)

Open source is for humans. So we have updated our contributing guidelines and agents file to ask that bots not create issues, pull requests, and security reports, nor should they sign the CLA. You may still use LLMs for development and accessibility/translation with disclosure.

Automating community interactions is not in the best interest of our project or the ecosystem. Along with other projects adopting similar policies, we hope AI etiquette will become mainstream so we can continue to ship high-quality software and have positive online experiences.

@adarshmadrecha Nah. Just had a moment to refine a few rough edges of the design.

@caddyserver Does this mean new major release is cooking?

Very subtle logo refresh.

We are proud to have Framer as a @caddyserver sponsor. New v3 looks good!!

Our sponsor, @bootdotdev , also sponsored this @veritasium video about shortest path algorithms! Very cool way to educate on CS topics. youtu.be/kS-CGkiPetQ

Our community does the coolest stuff.. @caddyserver realtime UI

@EmmaDSCodes @caddyserver It's so darn simple to set up, and it handles setting up Let's Encrypt certs and renewal automatically for HTTPS. In the most simple example, this is all you need for the config to start serving HTTPS over the wire from an app process.

@EmmaDSCodes I really dislike Nginx, I prefer using @caddyserver , I used it to create my own personal local proxy cli that sets up a Caddy server with .local domains to use for projects since I don't have Herd doing that for me anymore. github.com/Maxiviper117/d…