Hello
I’m very new to Caddy and the whole proxying thing in general. This whole post basically boils down to my lack of knowledge of it all.
A few days ago, I was able to get my first internal SSL Caddy reverse-proxy set up and running: Unable to get Caddy reverse-proxy working using internal certificates .
I may have the basics of the reverse-proxy thingie worked out now, but setting up Caddy on each server that requires it seems a bit too much.
Is there a way, in my homelab, to have one central Caddy reverse-proxy server that services multiple servers with their insecure services?
At first, I thought this probably isn’t a thing, since all the configuration examples on the internet are local, but I think I saw someone claiming on Reddit that it is possible?
If yes, would it work like this:
1 Caddy server
n servers with n services
Where I would point the browser to the Caddy server with a service-specific port? IF this would actually work, I would have to use the Caddy server FQDN instead of the service FQDN, which is not nice.
Or would it look like this:
1 Caddy server
n servers with n services, with each server having a local Caddy with all the services defined that redirect to the local Caddy server?
And even then… how would the DNS work? Would I point the browser to https://caddyserver:6000? The SSL certificate SAN list should also include the Caddy Server FQDN if I’m not using wildcard certificates?
Would all the servers have a CNAME that points to the Caddy server?
Also, would I, at some point, need to configure the browser proxy settings?
It’s all very confusing. I’m not 100% sure it even makes sense.
I didn’t post this under Help because I don’t have an issue with a particular Caddy configuration or installation. I’d like to know how the overall concept would work.