Caddy Container

How it works

This repository will help you create and deploy a container with the Caddy proxy, with the CloudFlare DNS and Consul K/V storage plugins compiled. Also, the container images for ARMv7, AARCH64 and x86_64 platforms are automatically built from this repository, and available from Docker Hub

REMEMBER to pass the CADDYFILE_PATH environment variable to the container, defining it with the absolute path for the Caddyfile.

Hashicorp Nomad Template

UPDATE: I am testing the functionality for certificate storage inside the Consul key-value distributed storage: look here for reference on the plugin I am bundling here.

UPDATE: At least starting from Nomad 1.6.x, I could use the script reload action of the template stanza successfully, therefore not needing any more the tini package and the signal handling Bash script.

The following piece of HCL is enough to make Caddy live reload its template all through the Nomad job file:

template {
    data = <<EOH
    Caddy template data here...
EOH
    destination   = "local/Caddyfile"
    change_mode   = "script"
    change_script {
        command       = "/usr/bin/caddy"
        args          = ["reload", "--config", "/local/Caddyfile", "--adapter", "caddyfile"]
        timeout       = "5s"
        fail_on_error = true
    }
}

Changing the configuration

To change the contents of Caddyfile and secrets.env without having Git to store your secrets, run the following git commands:

git update-index --assume-unchanged Caddyfile
git update-index --assume-unchanged secrets.env

Build the image (optional)

The Containerfile is written to allow cross-architecture builds, using QEMU's user-static package: to build the image on x86 for another platform do the following:

• be sure to install qemu-user-static if you need to run the container on an architecture different from the local builder's one;
• run the build process with podman build -f Containerfile.aarch64 -t mycompany/caddy:latest-aarch64 ..

To build using a different Caddy version (e.g. 2.0.0), append the following argument on the command line to podman build:

--build-arg=caddyversion=2.0.0

---

NOTE: If you have built the image and want to use it with compose, you will need to change the image: statement into the podman-compose.yml file