caddy

Best Practices

• Leverage automatic HTTPS — Caddy provisions TLS by default
• Use reverse_proxy directive for backend service proxying
• Enable gzip/zstd encoding for response compression
• Set appropriate headers for security (HSTS, CSP, X-Frame-Options)
• Use file_server for static file serving with browse disabled
• Configure log output for access and error logging
• Use handle and handle_path for clean URL routing
• Use domain names for automatic HTTPS, not localhost in production
• Include security headers for all public-facing sites
• Enable response compression for text-based content
• Configure health checks for reverse proxy backends
• Use handle blocks for clean URL path routing

Documentation Sources