Caddy 安装配置 SSL

caddy 安装

Download Caddy

打开上面的网站，选择平台点击下载按钮，即可下载对应的caddy可执行程序。

caddy配置

• 将下载的 caddy文件上传到服务器/usr/local/bin文件夹内

• 授权给文件可执行权限：chmod +x /usr/local/bin/caddy

• 测试是否正常：caddy -v 正常输出版本号，那么caddy正常。

caddy增加alidns模块

/usr/local/bin/caddy add-package github.com/caddy-dns/alidns

创建 Caddy 服务文件

1. 在 /etc/systemd/system/ 目录下创建一个新的服务文件，比如 caddy.service：

   1. 创建caddy.service文件：touch /etc/systemd/system/caddy.service

   2. 创建配置文件文件夹：mkdir /etc/caddy/

   3. 创建空配置文件：touch /etc/caddy/Caddyfile

   4. 给配置文件读取权限：chmod u+rwx /etc/caddy/Caddyfile

   # caddy.service
   #
   # For using Caddy with a config file.
   #
   # Make sure the ExecStart and ExecReload commands are correct
   # for your installation.
   #
   # See <https://caddyserver.com/docs/install> for instructions.
   #
   # WARNING: This service does not use the --resume flag, so if you
   # use the API to make changes, they will be overwritten by the
   # Caddyfile next time the service is restarted. If you intend to
   # use Caddy's API to configure it, add the --resume flag to the
   # `caddy run` command or use the caddy-api.service file instead.
   
   [Unit]
   Description=Caddy
   Documentation=https://caddyserver.com/docs/
   After=network.target network-online.target
   Requires=network-online.target
   
   [Service]
   Type=notify
   User=caddy
   Group=caddy
   ExecStart=/usr/local/bin/caddy run --environ --config /etc/caddy/Caddyfile
   ExecReload=/usr/local/bin/caddy reload --config /etc/caddy/Caddyfile --force
   TimeoutStopSec=5s
   LimitNOFILE=1048576
   PrivateTmp=true
   ProtectSystem=full
   AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
   
   [Install]
   WantedBy=multi-user.target
   

   确保路径和用户根据你的安装和配置进行调整。

2. 创建 Caddyfile： 确保你的 Caddyfile（默认路径为 /etc/caddy/Caddyfile）正确配置。

3. 调整权限： 赋予正确的权限，以确保 Caddy 可以访问配置文件和相关目录：

   sudo groupadd --system caddy
   sudo useradd --system --gid caddy --create-home --home-dir /var/lib/caddy caddy
   

   sudo chown -R caddy:caddy /etc/caddy
   sudo chown -R caddy:caddy /var/lib/caddy
   

4. 启动和启用服务： 重新加载 systemd，然后启动 Caddy 服务并设置为开机启动：

   <BASH>
   sudo systemctl daemon-reload
   sudo systemctl start caddy.service
   sudo systemctl enable caddy.service
   

5. 检查服务状态： 你可以用以下命令查看 Caddy 服务的状态：

   <BASH>
   sudo systemctl status caddy.service
   

Caddyfile配置

{
        email helsonlin@163.com
        acme_dns alidns {
                access_key_id "xx"
                access_key_secret "xxx"
        }
}
supabase.helson-lin.cn {
        reverse_proxy <http://127.0.0.1:8000>
}