Help needed. Maybe unusual set up?

[techjedialex (Alex S.)]

@George_Deal

:80 {
        redir * https://{host}{uri} 301
}

As written before, this one is a config in the mindset of Apache/nginx, it is completely unnecessary with Caddy, please remove it. Caddy redirects automatically to HTTPS by default.

@George_Deal

        root * /usr/share/caddy

        # Enable the static file server.
        file_server

These are superfluous as well since everything is proxied to 192.168.1.235, anyway. You would include the file_server directive if you only proxy certain things to the backend, like PHP files to a FastCGI server. In such a scenario file_server would then serve static files like images, otherwise the whole site would be broken.

@George_Deal

I think caddy is so brilliant that I will use it on all my pies from now on and ditch apache

Heh heh. One more step towards my mission to eradicate Apache usage everywhere

@George_Deal

One more question: Is there a way I could make this all sicure? Perhaps by adding a token to the http reverse_proxy?

Well..

• turn Caddy into a Web Application Firewall with corazawaf.
• block bot and (AI) scraper traffic with Anubis.
  • or use something more “lightweight” like caddy-defender.

Some of these need you to compile Caddy yourself, though, or in the case of Anubis, jump through some hoops (as with Anubis a second service would be running in the background). The easiest to do ad-hoc would be an @aibots matcher (thread, GitHub) blocking all known AI scrapers.