giiibates/caddybuddy repository overview

CaddyBuddy is a lightweight web UI for managing a single Caddy installation.

It provides a dashboard, site management, a Caddyfile editor, certificate monitoring and renewal, SSL Labs assessments with weekly or monthly scheduling, onboarding, and secure defaults in one compact container image. Authentication combines CSRF protection, invisible anti-bot checks, rate limiting, optional passkey (WebAuthn) sign-in, and optional TOTP two-factor authentication.

⁠Screenshots

⁠Image

docker pull giiibates/caddybuddy:latest

Supported platforms:

• linux/amd64
• linux/arm64

⁠Quick Start

Generate a strong application secret:

export CB_SECRET_KEY="$(head -c 32 /dev/urandom | base64)"

Generate this secret once and save it securely for future starts. Reuse the same value with the existing data directory: by default it also protects password hashes and TOTP secrets, so changing it can prevent existing users from signing in.

Then start CaddyBuddy with the example Compose file from the repository:

CADDYBUDDY_VERSION=latest docker compose -f docker/docker-compose.yml.example up -d

The container expects access to your Caddy Admin API, a persistent data directory, and Caddy's certificate storage mounted at /var/lib/caddy/.local/share/caddy for certificate inspection and renewal. Without a configured Caddy control mode, CaddyBuddy can request a reload through the Admin API; a full forced renewal or repair may still require runtime control.

⁠Documentation

• Documentation: https://gill-bates.github.io/caddybuddy/⁠
• GitHub: https://github.com/Gill-Bates/caddybuddy⁠
• Releases: https://github.com/Gill-Bates/caddybuddy/releases⁠

⁠