News for hackers. Stuff that matters.
Re:Nginx Development Guide by Macha on Wednesday August 16, 2023 @11:30AM (#37148630)
So I've been slowly moving from nginx to Caddy in new projects (old projects still use nginx).

The reasons for this are:

1. Automatic ACME integration in Caddy compared to the mess of containers something like nginx-proxy-manager is or the unreliability of external solutions like certbot or acme.sh

2. nginx's config. Footguns like if are well known, but even just if you want to deploy a nginx server with virtual hosts, did you know that if there is no Host header nginx serves the site evaluated first in its config file (even if the site has a server_name directive)? This is fine for an enterprise deployment where you probably only have one site behind nginx anyway, but as someone who has their side projects share servers to cut down on costs, it's really undesirable. There is a way around it by setting up a default host to explicitly serve errors, but it's just a chore I don't have on Caddy.

3. I can use Caddy on the CLI for testing also, in a way that's a more advanced replacement for python -m http.server etc. for more advanced use cases, or even just setting up server config rules.

Re:Nginx Development Guide by morelisp on Wednesday August 16, 2023 @12:22PM (#37149425)
> did you know that if there is no Host header nginx serves the site evaluated first in its config file (even if the site has a server_name directive)?

Before that it goes to the one named "" and if that doesn't exist, the one with default_server.

If traffic with no Host header went to no server by default, people would also call that a footgun...

Re:Nginx Development Guide by Macha on Wednesday August 16, 2023 @02:23PM (#37151432)
Setting a server_name is something you need to opt into. So I feel it should be required to match to serve that vhost. If you didn't want it to apply only to the right vhost, don't configure it to require a specific vhost?
Re:Nginx Development Guide by dekobon on Wednesday August 16, 2023 @12:59PM (#37149996)
Regarding #1, NGINX has created a project to make ACME integration easier. It is quite new, so I doubt it will replace your use of Caddy, but it is worth consideration.

https://github.com/nginx/njs-acme