[Advanced Admin] HTTPS for WordPress using Caddy

---

Issue Description

Only an Apache example is provided.

URL of the Page with the Issue

HTTPS for WordPress

Section of Page with the issue

Best Practices for HTTPS for WordPress

Why is this a problem?

Examples for other webservers will make this section more useful.

Suggested Fix

Immediately after the text...

It is recommended for all production WordPress sites to use HTTPS.

Use a reputable web host, most provide HTTPS service as a standard.
Use a SSL Certificate from Let’s Encrypt, they are free and easy to use.
Serve Static Content from an SSL enabled CDN
You may need to redirect your HTTP traffic to your HTTPS site. For Apache, you can do so by creating two VirtualHost entries for example:

<VirtualHost *:80>
    ServerName mkaz.blog
    Redirect / https://mkaz.blog/
</VirtualHost>

<VirtualHost *:443>
    ServerName mkaz.blog
    DocumentRoot /home/mkaz/sites/mkaz.blog
    <Directory /home/mkaz/sites/mkaz.blog>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    SSLEngine on
    SSLCertificateFile    /etc/letsencrypt/live/mkaz.blog/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/mkaz.blog/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/mkaz.blog/fullchain.pem
    IncludeOptional /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>

Please add the following example for the Caddy webserver.

The Caddy web server activates HTTPS by default for qualifying domain names and automatically enables HTTP → HTTPS redirects. By default, it obtains certificates from Let’s Encrypt and renews them automatically.

example.com { 
    # Set this path to your site's directory:
    root * /var/www/html

    # Enable Gzip compression:
    encode gzip

    # Serve WordPress PHP files through php-fpm:
    php_fastcgi unix//run/php/php7.4-fpm.sock

    # Enable the static file server:
    file_server
}

✍️ Depending on your PHP-FPM config, the php_fastcgi can also be php_fastcgi 127.0.0.1:9000.

Links to relevant resources

1. The suggested text and code was discussed extensively with Caddy core maintainers in this Caddy forum thread HTTPS for WordPress using Caddy

Open the HTTPS for WordPress documentation page and review the “Best Practices for HTTPS for WordPress” section, where the Apache example appears. Add the provided Caddy example and its PHP-FPM note after that text, then verify the documentation renders correctly and clearly explains the Caddy setup.