zlint
Caddy
zlint | Caddy | |
---|---|---|
3 | 432 | |
383 | 62,505 | |
1.6% | 2.3% | |
8.2 | 9.4 | |
5 days ago | 3 days ago | |
Go | Go | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
zlint
-
Let's Encrypt Acme API Outage
Yup, the two most popular are:
https://github.com/zmap/zlint
https://github.com/certlint/certlint
They each have their strengths and weaknesses, so CAs are advised to use both.
- zlint: X.509 Certificate Linter focused on Web PKI standards and requirements.
-
Introducing Certomancer: the Python X.509 testing framework.
Can you compare it with https://github.com/zmap/zlint as a cert linter?
Caddy
-
An Introduction to Cosmo Router — Blazingly Fast Open-Source Federation V1/V2 Gateway
This approach offers a level of customizability similar to what xcaddy does for the Caddy server, eliminating the complexities associated with writing Rhai scripts to customize a precompiled binary, as is the case with the Apollo Router.
-
The Easiest Way To Use Https In Localhost
Caddy is a server written in Go programming language, known to be easy peasy to configure (Unlike configuring Nginx), and it also includes https by default.
-
Self-hosting with Caddy Server And Souin (Caching Module)
Caddy is the ultimate web server anyone should be using. This is true for production as well as for local development. It is very fast, and by default obtains and renews SSL certificates automatically. This is useful for when you want to test certain website feature that is only allowed when they're accessed with HTTPS. You get free TLS for all your subdomains, and it does that in a scalable way.
- Nginx: Try_files Is Evil Too
-
The Plan 9 Foundation
Did you happen to look at caddy? It at least used to have some degree of support for plan9: https://github.com/caddyserver/caddy/issues/1093
-
Setting up a trusted, self-signed SSL/TLS certificate authority in Linux
https://github.com/caddyserver/caddy/issues/5759 :
> When generating a CA cert via caddy and putting that in the trust store, those private keys can also forge certificates for any other domain.
RFC5280 (2008) "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile" > Section 4.2.1.10
- Caddy – The Ultimate Server with Automatic HTTPS
-
Cloudflare is almost perfect
Sidecar containers: Google Cloud Run has a cool feature where you can run multiple containers next to each other. So for example, if you want to run Caddy or Traefik as a reverse proxy for your ingress container and then have both your web frontend container & backend api container co-located in the same service, you can do that & have everything be super low latency.
-
Build a Symfony 7 boilerplate using FrankenPHP, Docker, PostgreSQL and php 8.4
FrankenPHP use Caddy as proxy server, so we'll need a Caddyfile to configure it and also provide basic php configurations. Here again we'll stick to the FrankenPHP documention. You can find it in the docker/frankenphp folder.
-
A $5 to $10 VPS can do a lot more than you think
Caddy to allow our logs to be sent over HTTPS
What are some alternatives?
cli - 🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
HAProxy - HAProxy documentation
certomancer - Quickly construct, mock & deploy PKI test configurations using simple declarative configuration.
oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
certlint - X.509 certificate linter
traefik - The Cloud Native Application Proxy