1. Caddy version (caddy version
):
v2.4.0
2. How I run Caddy:
a. System environment:
Debian with systemd.
b. Command:
I do not use any command.
c. Service/unit/compose file:
# caddy.service
#
# For using Caddy with a config file.
#
# Make sure the ExecStart and ExecReload commands are correct
# for your installation.
#
# See https://caddyserver.com/docs/install for instructions.
#
# WARNING: This service does not use the --resume flag, so if you
# use the API to make changes, they will be overwritten by the
# Caddyfile next time the service is restarted. If you intend to
# use Caddy's API to configure it, add the --resume flag to the
# `caddy run` command or use the caddy-api.service file instead.
[Unit]
Description=Caddy
Documentation=https://caddyserver.com/docs/
After=network.target network-online.target
Requires=network-online.target
[Service]
Type=notify
User=caddy
Group=caddy
ExecStart=/usr/bin/caddy run --environ --config /etc/caddy/Caddyfile
ExecReload=/usr/bin/caddy reload --config /etc/caddy/Caddyfile
TimeoutStopSec=5s
LimitNOFILE=1048576
LimitNPROC=512
PrivateTmp=true
ProtectSystem=full
AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]
WantedBy=multi-user.target
d. My complete Caddyfile or JSON config:
example.com {
encode zstd gzip
handle /download/* {
uri strip_prefix /download
root * /var/lib/transmission-daemon/downloads
file_server browse
}
basicauth {
# credentials
}
}
3. The problem I’m having:
When browsing /download/
page, I can see the Transmission downloads. However, when I click on a downloaded file, I have a 403 error.
4. Error messages and/or full log output:
I do not see any log in journalctl.
5. What I already tried:
Transmission is configured so that downloaded torrents are readable by debian-transmission group and caddy user is in debian-transmission group.
I have check the torrents have correct permissions:
ls -l /var/lib/transmission-daemon/downloads
-rw-r----- 1 debian-transmission debian-transmission 7 20 mai 03:05 mytorrent
I have checked that caddy can access the file:
sudo -u caddy cat /var/lib/transmission-daemon/downloads/mytorrent
mycontent
Making the torrents world readable fixes the issue but I don’t want to have my torrents world readable.