caddyserver/caddy

View on GitHub

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Stars: 75.9k
Forks: 5k
Open beginner issues: 0
Indexed issues: 199
Avg merge: 3d 6h
Merged PRs (30d): 28

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

199 open issues indexed

caddyauth: basic_auth accepts duplicate usernames that only collide after {env.*} expansion Open

bug :lady_beetle: help wanted :sos:

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

caddyserver/caddy#8037 · 2 comments · Opened Sep 19, 2026
Open redirect on carefully crafted paths Open

bug :lady_beetle:

Difficulty 4/5 3-5 days Newbie friendliness 55/100

caddyserver/caddy#8023 · 10 comments · Opened Sep 15, 2026
basic auth blanks literal braces in usernames and passwords (unknown placeholders) Open

Difficulty 2/5 1-3 hours Newbie friendliness 90/100

caddyserver/caddy#8016 · Opened Sep 13, 2026
strip_path_prefix and handle_path silently fail when the prefix contains non-ASCII characters Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

caddyserver/caddy#8001 · Opened Sep 7, 2026
Every TLS handshake dispatches an event even when no events app is configured Open

bug :lady_beetle:

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7996 · 1 comment · 1 reaction · Opened Sep 6, 2026
caddyhttp: support Prometheus native histograms Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

caddyserver/caddy#7983 · 1 comment · 1 reaction · Opened Sep 2, 2026
reverse_proxy: slow-start warm-up for newly added or recovered upstreams Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

caddyserver/caddy#7966 · 2 comments · Opened Aug 29, 2026
Flush error logs before process exits Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

caddyserver/caddy#7962 · Opened Aug 27, 2026
Use sync.Map instead of mutex for caching to speed up dynamic SRV lookups of slow queries Open

bug :lady_beetle:

Difficulty 3/5 1-2 days Newbie friendliness 52/100

caddyserver/caddy#7946 · 4 comments · Opened Aug 19, 2026
Add optional Content-Digest headers Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

caddyserver/caddy#7901 · 2 comments · Opened Jul 23, 2026
caddytls: reused certificate cache races with renewal workers during provisioning Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

caddyserver/caddy#7897 · 1 comment · Opened Jul 20, 2026
reverseproxy: add `least_latency` selection policy (power-of-two-choices + peak-EWMA) Open

discussion :speech_balloon: feature :gear:

Difficulty 5/5 Over a week Newbie friendliness 52/100

caddyserver/caddy#7879 · 4 comments · Opened Jul 14, 2026
Caddy doesn't forward truncated responses Open

bug :lady_beetle: good first issue :baby_chick: help wanted :sos:

Difficulty 4/5 3-5 days Newbie friendliness 52/100

caddyserver/caddy#7845 · 6 comments · Opened Jun 28, 2026
reverse_proxy: add per-upstream request/response/duration metrics Open

discussion :speech_balloon: feature :gear:

Difficulty 4/5 3-5 days Newbie friendliness 48/100

caddyserver/caddy#7844 · 1 comment · 2 reactions · Opened Jun 26, 2026
ARI unable to handle negative `remaining` values Open

bug :lady_beetle:

Difficulty 3/5 1-2 days Newbie friendliness 56/100

caddyserver/caddy#7843 · Opened Jun 26, 2026
reverse_proxy: bodyless HTTP/3 client GET forwarded to an HTTP/2 upstream gets ContentLength -1 instead of 0 (regression in v2.9.0) Open

bug :lady_beetle: upstream :arrow_up:

Difficulty 4/5 3-5 days Newbie friendliness 48/100

caddyserver/caddy#7835 · 7 comments · 1 reaction · Opened Jun 23, 2026
WebSocket header casing normalization reverted when header ops are configured Open

bug :lady_beetle:

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

caddyserver/caddy#7784 · 5 comments · Opened Jun 1, 2026
Consider including *some* event handlers by default Open

discussion :speech_balloon:

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7765 · 6 comments · Opened May 21, 2026
Feature: Allow using inode in ETags Open

discussion :speech_balloon: feature :gear:

Difficulty 4/5 3-5 days Newbie friendliness 48/100

caddyserver/caddy#7730 · 5 comments · Opened May 15, 2026
`{file.*}` placeholder is not replaced with file content in named matcher Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

caddyserver/caddy#7721 · 6 comments · Opened May 13, 2026
Feature: Add support for native brotli Open

deferred :alarm_clock: feature :gear:

Difficulty 5/5 Over a week Newbie friendliness 35/100

caddyserver/caddy#7699 · 16 comments · 5 reactions · Opened May 10, 2026
Placeholder http.request.body truncates at max_size bytes, rather than producing a 413 error Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

caddyserver/caddy#7691 · Opened May 4, 2026
Support FastCGI for `caddy reverse-proxy` Open

feature :gear:

Difficulty 3/5 1-2 days Newbie friendliness 46/100

caddyserver/caddy#7679 · 2 comments · Opened May 1, 2026
Certificates remain stale after wake from sleep Open

needs info :mailbox_with_no_mail:

Difficulty 4/5 3-5 days Newbie friendliness 48/100

caddyserver/caddy#7677 · 6 comments · Opened Apr 29, 2026
Design: Stricter Host validation and lower-level HTTP error handling Open

discussion :speech_balloon:

Difficulty 5/5 Over a week Newbie friendliness 25/100

caddyserver/caddy#7628 · 4 comments · 1 reaction · Opened Apr 4, 2026
ci/cd: accommodate changes in cosign cli Open

CI/CD :nut_and_bolt:

Difficulty 3/5 1-2 days Newbie friendliness 35/100

caddyserver/caddy#7550 · 5 comments · 1 reaction · Opened Mar 5, 2026
Switch to AF_UNIX admin socket by default Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7516 · 4 comments · 4 reactions · Opened Feb 23, 2026
Support DNS-PERSIST challenge type Open

discussion :speech_balloon: feature :gear: in progress :running_man:

caddyserver/caddy#7495 · 14 comments · 43 reactions · 1 assignee · Opened Feb 18, 2026
Add Host Header Validation for IP-Literals? Open

bug :lady_beetle:

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7459 · 14 comments · Opened Feb 3, 2026
Websocket compression (RFC 7692) Open

feature :gear: in progress :running_man:

Difficulty 5/5 Over a week Newbie friendliness 35/100

caddyserver/caddy#7455 · 12 comments · 1 reaction · Opened Jan 31, 2026
Consider `caddy status` command Open

feature :gear:

Difficulty 5/5 Over a week Newbie friendliness 35/100

caddyserver/caddy#7453 · 14 comments · 4 reactions · Opened Jan 30, 2026
Make caddy reload give INFO that key_type will only be changed on next renewal Open

feature :gear:

Difficulty 3/5 1-2 days Newbie friendliness 52/100

caddyserver/caddy#7444 · 7 comments · Opened Jan 21, 2026
Client TLS Certificate not Requested on Subsequent visits when using verify_if_given Open

needs info :mailbox_with_no_mail:

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7443 · 4 comments · 1 reaction · Opened Jan 17, 2026
Consider using the 'shortlived' certificate profile by default for Let's Encrypt Open

discussion :speech_balloon:

Difficulty 5/5 Over a week Newbie friendliness 35/100

caddyserver/caddy#7441 · 2 comments · 41 reactions · Opened Jan 16, 2026
Mutual TLS doesn't work on Android Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7405 · 5 comments · Opened Dec 23, 2025
Error 411 when using Transfer-Encoding: chunked via reverse proxy over unix-socket & fastcgi Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

caddyserver/caddy#7386 · 2 comments · Opened Dec 5, 2025
Replacer's addHTTPVarsToReplacer should return false on unset dynamic placeholder keys Open

discussion :speech_balloon:

Difficulty 3/5 1-2 days Newbie friendliness 48/100

caddyserver/caddy#7373 · 4 comments · Opened Nov 29, 2025
Panic in certificate worker when renewal fails Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7366 · 1 comment · Opened Nov 25, 2025
Wildcard domain throttled block valid definitions Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7365 · 1 comment · Opened Nov 25, 2025
header_up sometimes not working Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7362 · 2 comments · Opened Nov 24, 2025
Caddy does not trust its own Local CA - x509 Open

upstream :arrow_up:

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7361 · 15 comments · Opened Nov 22, 2025
Combination of ech and a site block for the ech name cannot use tls resolver config Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7354 · 4 comments · Opened Nov 19, 2025
Add `token_auth` with timing-safe comparison to compliment `basic_auth` Open

discussion :speech_balloon: feature :gear:

Difficulty 5/5 Over a week Newbie friendliness 25/100

caddyserver/caddy#7349 · 7 comments · Opened Nov 12, 2025
`redir`: using `temporary` issues 302 rather than 307 Open

bug :lady_beetle: discussion :speech_balloon:

Difficulty 4/5 3-5 days Newbie friendliness 45/100

caddyserver/caddy#7348 · 2 comments · Opened Nov 11, 2025
Can't use different tls issuers on catch-all hosts of different ports Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7311 · 3 comments · Opened Oct 17, 2025
Disabling the built-in Tailscale behavior Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

caddyserver/caddy#7308 · 12 comments · Opened Oct 16, 2025
Output a lot of information and exit automatically Open

needs info :mailbox_with_no_mail:

Difficulty 4/5 3-5 days Newbie friendliness 25/100

caddyserver/caddy#7249 · 31 comments · Opened Sep 10, 2025
Admin API /load returns 200 OK for invalid Caddyfile when it's not formatted with 'caddy fmt' Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

caddyserver/caddy#7246 · 1 comment · Opened Sep 9, 2025
Socket activation on macOS Open

Difficulty 5/5 Over a week Newbie friendliness 28/100

caddyserver/caddy#7241 · 2 comments · Opened Sep 6, 2025
Natural sorting option for file_server file `browse` file listings Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

caddyserver/caddy#7226 · 9 comments · Opened Aug 31, 2025

caddyserver/caddy

Get new issues in your inbox