Skip to main content

Caddy web server

v0.1.14

Caddy v2 ops via its admin API (default http://127.0.0.1:2019) and CLI. Config dump, upstream health, PKI inventory, config validation, plus reload (live config swap). Set CADDY_ADMIN env var if not on default.

8 allowed by default 2 need approval by default
Pack ID
caddy
Vendor
emisar
OS
linux
Actions
10
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
caddy curl

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install caddy --hash sha256:89a79c967481ec287396dd6a5be729ae43042430ae299c3d803036df18b33a06

Actions 10 total

View on GitHub
  • caddy.access_log_tail exec low

    tail caddy access log

    Tail the access log (path configurable via CADDY_ACCESS_LOG env).

    View source on GitHub
  • caddy.adapt_caddyfile exec low

    caddy adapt --config <file>

    Converts a Caddyfile to JSON config without loading it.

    View source on GitHub
  • caddy.config_dump exec medium

    GET /config (current config)

    Dump the currently-loaded Caddy configuration as JSON. This surfaces the full config, which can carry secrets (TLS private-key material, basic-auth hashes, upstream credentials, API tokens). The runner's redaction is a fail-closed backstop, not a guarantee — it is pattern-bound and can miss a bespoke secret whose name and value match no rule.

    View source on GitHub
  • caddy.pki_certs exec low

    GET /pki/ca/<id>/certificates

    List certificates managed by Caddy's internal PKI.

    View source on GitHub
  • caddy.reload_config exec high

    caddy reload --config <file>

    Live-swap the running config. No connection drops on success; rejected config keeps the old one running.

    View source on GitHub
  • caddy.reverse_proxy_upstreams exec low

    GET /reverse_proxy/upstreams

    List all reverse-proxy upstreams with current health.

    View source on GitHub
  • caddy.runtime_metrics exec low

    GET /metrics (Prometheus exposition)

    Show Caddy's Prometheus-format metrics endpoint.

    View source on GitHub
  • caddy.stop exec high

    caddy stop

    Stop the running Caddy process via its admin API. All listeners close; in-flight requests drain. Recovery requires starting Caddy again via systemd or `caddy start`. Use as a last resort during incidents.

    View source on GitHub
  • caddy.validate_config exec low

    caddy validate --config <file>

    Validates a Caddyfile or JSON config without loading it.

    View source on GitHub
  • caddy.version exec low

    caddy version

    Show Caddy binary version + build info.

    View source on GitHub