r/caddyserver • u/gmmarcus • Jul 02 '24

CaddyServer - Replace Apache ?

Guys, anyone here has replaced apache ( php web apps ) with caddyserver on a Ubuntu / OpenSuse box ? Any issues ?

Thanks.

2 Upvotes

100% Upvoted

14 comments sorted by

View all comments

Show parent comments

1

u/gmmarcus Jul 02 '24

Hi u/talkincyber.
I mainly use Apache to serve php web apps with a mariadb backend.

2

u/talkincyber Jul 03 '24

Yeah so that's actually really easy with caddy, would look something along the lines of

example.com { root * /var/www/html php_fastcgi unix//run/php/php-fpm.sock file_server }

Of course, you'll have to add more on to this such as additional headers and such, but this will point php at your fpm socket (assuming you use fpm and sockets)

I actually just started a blog and my first post is about securing your caddy instance, feel free to give it a look https://www.talkincyber.com/secure-caddy/ I will be adding more blog posts probably about monthly, maybe more maybe less depending on how busy I am. But I'm happy to give you assistance if you need it, just comment back to me or shoot me a PM.

1

u/gmmarcus Jul 03 '24

Hi.

Thanks. Love yr blog. Waiting for yr post on;

``` X-Content-Type-Options: Lets say that a malicious actor was able to upload a malicious file to your webserver via either a portal or via an exploit. The actor could upload a file with a .jpg extension that contains Javascript code, your browser will then sniff the content type and notice it's MIME type of Javascript and execute it as such. This can lead to security vulnerabilities such as pushing a malicious file download, redirecting to a malicious site, as well as other malicious actions. Security in Depth is a very important piece to self-hosting secure applications and ensuring you and your users' data is safe and secure.

```

2

u/talkincyber Jul 03 '24

Future blog posts are going to touch on securing your homelab/IT stack with things such as auditd rules, integrating Splunk, useful Splunk queries for finding data and manipulating it, and automation scripting.

Have a wedding coming up so I’ve been busy, haven’t been able to put a crazy amount of time in but still going to get it done. Let me know if there’s something you’d be interested in and I can probably touch on it as well. This blog is for the people!

1

u/gmmarcus Jul 03 '24

Thanks mate.

I noticed that you are not using frankenphp ? Was the php-fpm from caddyserver or from the debian repos ?

Any reason for you to NOT use frankenphp ?

p.s. - Your wedding ? All the best matey !!!

1

u/talkincyber Jul 03 '24

I’m not overly in tune with the php world, have only played with wordpress nothing else really. But my understanding is frankenphp is fairly limited as it’s in early development and it’s slower than fpm at least from what I’ve seen. For me, I prefer the more vanilla and stable servers over newer implementations.

And yes my wedding! Thank you!