Internal TLS intermediate cert lifespan

francislavoie · September 6, 2021, 2:05am

~caddy is the same as /var/lib/caddy, because the HOME of the caddy user is /var/lib/caddy. See the script in the .deb:

github.com

caddyserver/dist/blob/2f23e8a67eba98613ba87f2d04768f6b28875386/scripts/postinstall.sh#L13

    
      
          
          
if [ "$1" = "configure" ]; then
          	# Add user and group
          	if ! getent group caddy >/dev/null; then
          		groupadd --system caddy
          	fi
          	if ! getent passwd caddy >/dev/null; then
          		useradd --system \
          			--gid caddy \
          			--create-home \
          			--home-dir /var/lib/caddy \
          			--shell /usr/sbin/nologin \
          			--comment "Caddy web server" \
          			caddy
          	fi
          	if getent group www-data >/dev/null; then
          		usermod -aG www-data caddy
          	fi
          
          
	# Add log directory with correct permissions
          	if [ ! -d /var/log/caddy ]; then

Basically ~<user> is a shortcut for giving you the HOME of a particular user. ~ on its own is the HOME of the current user.

You can test it by running echo ~caddy