I switched to Caddy
Mon 05 May 2025In a previous blog post, I described how I use nginx to serve my blog, and how uv makes it easier to setup Certbot to manage TLS certificates.
I've since switched to Caddy, which manages certificates for me.
I never really had any trouble with my nginx+uv+Certbot setup, but Caddy made it much easier to set up TLS for the content I host on my tailnet.
(I have a PyPI server, some experiments, some admin pages, and a nav page for each node.)
Tailscale has useful documentation about this here.
Eventually, I had setup Caddy on all my Tailscale devices.
On hoctor.xyz
, I had nginx attached to the public interface, and Caddy attached to the Tailscale interface.
It's simpler to use just one tool, so I rewrote my various nginx configs as a Caddyfile, and uninstalled nginx.