Caddy confusion (concern)

[Marko_Bozic]

1. Caddy version (caddy version):

2.3.0

2. How I run Caddy:

Windows 10

a. System environment:

b. Command:

caddy start

d. My complete Caddyfile or JSON config:

domain_name.com
    reverse_proxy /sonarr*  http://localhost:8989
	reverse_proxy /radarr*  http://localhost:7878
	reverse_proxy /bazarr*  http://localhost:6767
	reverse_proxy /emby*  http://localhost:8096

3. The problem I’m having:

Hi,

I managed to sucessfully reverse proxy several programs that are hosted with ddns but I have one confusion. I can access web interfaces of those programs(sonarr,radarr,emby…) securely with https://domain_name/subpaths but I can also access them with http://domain_name.com:port which is not protected. Is it supposed to be like this or is there a way to disable/block access to http address which is not protected.

Edit: I think I have figured it out. I should disable port forwarding for every port except 443 and 80 which Caddy uses?

[francislavoie]

@Marko_Bozic

I think I have figured it out. I should disable port forwarding for every port except 443 and 80 which Caddy uses?

Yep that’s correct. See the following:

Using Caddy as a reverse proxy in a home network

If you want to run a service inside a Local Area Network (LAN) such as your home or office – and especially if you want to be able to access it from outside that network – Caddy can help you accomplish this quite easily. This guide will show you how. It assumes you’ve never done this before, but that you have some technical proficiency and are somewhat knowledgable about your own network. Do this at your own risk. There are several ways to make private services accessible from other n…

Also as an aside, I typically recommend using subdomains for proxying to your individual services. Many apps don’t behave well when proxied under a subpath.

The "subfolder problem", OR, "why can't I reverse proxy my app into a subfolder?"

Have you ever tried to reverse proxy an app into its own little subfolder of your domain name? Makes things neat, doesn’t it? Using example.com/foo/ for one app, example.com/bar/ for another. If you’re coming here from one of the selfhosted communities, you might be thinking along the lines of example.com/sonarr/, example.com/radarr/ etc. Chances are, you’ve tried some configuration along these lines: example.com { redir /sonarr /sonarr/ handle_path /sonarr/* { reverse_proxy localhost…