Caddy HTTPS Gateway¶
Caddy HTTPS Gateway runs the official Caddy v2.11.7 binary on Ubuntu 24.04 as a reverse proxy that is private by default. On first boot it creates its own local certificate authority, a password and a working configuration, and serves everything on loopback only. Use it as a starting point for an HTTPS gateway you configure and open up yourself.
Launch on AWS Marketplace Getting started
What is pre-installed¶
- Caddy v2.11.7, the official linux/amd64 release binary at
/usr/bin/caddy, checked against the release's signed checksums when the image is built. It is the standard build, with no extra plugins. - systemd units:
caddy.serviceruns Caddy as thecaddysystem user, andsushi-caddy-firstboot.serviceprepares the instance on first boot. - A sample site under
/var/lib/caddy/origin: a small web page and a JSON API, so you can see the proxy work before you point it at your own application. - A walkthrough script at
/opt/sushi/docs/demo.sh.
Nothing secret is baked into the image. The password, the configuration and the certificate authority are created on your instance on first boot.
Ports¶
All listeners are on 127.0.0.1. Nothing listens on a public interface, and
you do not need any inbound security group rule.
| Address | What it is |
|---|---|
127.0.0.1:8080 |
Plain HTTP, serves the sample site |
127.0.0.1:8443 |
HTTPS reverse proxy, with a certificate from Caddy's internal CA |
127.0.0.1:2019 |
Caddy admin API |
The HTTPS path /private/api/status.json asks for HTTP basic auth, user
pilot, with the password created on first boot.
How billing works¶
The software is billed by the hour while an instance is running, on the
t3.medium instance type. AWS bills EC2, EBS and data transfer separately.
The current price and any free trial are shown on the AWS Marketplace
listing and in the offer terms.
Where to go next¶
- Getting started: subscribe, launch, connect and check that the gateway works.
- Configuration: edit the Caddyfile, proxy your own application and serve a public name.
- Operations: security, updates, backups, logs and support.
- Troubleshooting: fixes for common problems.
Upstream project¶
Caddy is written by Matthew Holt and the Caddy contributors and published under the Apache-2.0 license. Software Sushi packages it independently and does not claim upstream endorsement. For everything Caddy can do, see the Caddy documentation.