Caddy + Cloudflare + remote_ip block by ipaddress not working

[ngcad (ng)]

After reviewing further, decided to create /etc/caddy/envfile, added all the configurable variables there and referenced in Caddyfile as {$VAR}

caddy.service

EnvironmentFile=-/etc/caddy/envfile

Your thoughts?

Also looks like you can’t use {env.VAR} when using EnvironmentFile which means those values still will be in generated json?

[francislavoie]

@ngcad

Also looks like you can’t use {env.VAR} when using EnvironmentFile

No, you definitely should be able to. That’s a systemd thing, not a Caddy thing.

[ngcad (ng)]

That’s what I thought, found out what the problem was. I was doing

sudo systemctl reload caddy

and it didn’t get picked up,

when restarted it works

sudo systemctl restart caddy

Thanks for the help

[francislavoie]

Yeah, any change to the systemd config requires a service restart. Changes only to your Caddy config can simply be a zero-downtime reload.

[ngcad (ng)]

@francislavoie

One reason to use {env.*} is that by default your config gets autosaved to Caddy’s config storage location and if you used the {$ENV} style, the actual value would appear in the autosaved JSON config, but that doesn’t happen with {env.*} because it’s replaced at runtime.

I’ve configured S3 as storage, just went through the bucket and I don’t see any json stored there, all i see is a acme folder with certificates, you mean json generated/stored in the filesystem?

[francislavoie]

The data storage is different from the config storage. See that link which explains the difference.