Hacker Newsnew | past | comments | ask | show | jobs | submit | pgug's commentslogin

I find the documentation for the syntax to be a bit lacking if you want to do anything that isn't very basic and how they want you to do it. For example, I want to use a wildcard certificate for my internal services to hide service names from certificate transparency logs, and I can't get the syntax working. Chatgpt and gemini also couldn't.


This here is how it's done, where you have a wildcard dns entry for subdomains of secret.domain.com.

{ acme_dns cloudflare oWN-HR__kxRoDhrixaQbI6M0uwS4bfXub4g4xia2 debug }

*.secret.domain.com {

        @sso host sso.secret.domain.com
        handle @sso {
                reverse_proxy 192.168.200.4:9000
        }

        @adguard host adguard.secret.domain.com
        handle @adguard {
                reverse_proxy 192.168.200.4:9000
        }


        @forge host     forge.secret.domain.com
        handle @forge {
                reverse_proxy http://forgejo:3000
        }

        # respond to whatever doesn't match
        handle {
                respond "Wildcard subdomain does not have a web configuration!"
        }

        handle_errors {
                respond "Error {err.status_code} {err.status_text}"
        }
}


Thank you, I will try that later today.


This integration doesn’t support the dns-01 challenge. So wildcard certs are out of the question at this point.


PS. Oh, this subthread is about Caddy, not Nginx. Nevermind my comment then!


For wildcards you need a Caddy build that includes the dns plugin for your specific provider. There's a tool called xcaddy that helps with that. It's still kinda annoying because now you need to manage the binary for yourself but when I tried it with Hetzner it worked fine.


In case it helps someone else, this is what I do:

    FROM caddy:2-builder AS builder

    RUN xcaddy build \
        --with github.com/caddy-dns/cloudflare \
        --with github.com/greenpau/caddy-security

    FROM caddy:2

    COPY --from=builder /usr/bin/caddy /usr/bin/caddy

    COPY Caddyfile /etc/caddy/Caddyfile
Then just build & run it via docker compose


That is a great idea. Do you know any alternatives to Vault that is owned by one of these organizations?


No, I don't know of one. It seems Hashicorpo Vault has a good head start. But up until 11 hours ago, the code was MPL 2.0 licensed, so somebody could fork and start a project under one of those foundations.


When I use a mobile I usually type G! instead of !g because of autocorrect, and it works just the same.


What is the name for these simple css files that can turn plain html into a full layout/theme?

Can I find a list of these somewhere?


I don't think there's anything official or even standard for naming. Some places refer to them as class-less:

https://github.com/troxler/awesome-css-frameworks#class-less

And these seem to be the strictly frameworks without classes.

This site refers to them as "drop-in" frameworks (and lets you test them out live):

https://dohliam.github.io/dropin-minimal-css/

The ones here appear to not be strictly class-less, since I know at least some of those frameworks do have classes, but are probably optional/very light on classes. 98.css would also be a "drop in" in this case since you can see things like the title bar do use classes:

    <div class="title-bar">
      <div class="title-bar-text">A Title Bar</div>
      <div class="title-bar-controls">
        <button aria-label="Close"></button>
      </div>
    </div>


Are you using Firefox? Because it happens to me too with some websites, and it really creeps me out.


I finished my masters degree. I had never thought it would happen, I was so sure I would be kicked out or commit suicide before I got to the point where I would actually finish. But I did it, I now have a degree.


I there any anti reCaptcha or anti Google, that I can donate to? I want to donate a small amount every time Google forces me to solve their problems.


Pay the website owner to remove reCaptcha from the sites you use?


Get a disabled person to take them to court for discrimination.


> Get a disabled person to take them to court for discrimination.

I was thinking something more along the lines of sponsoring them to take Google to court ;)


A good home, everything I need to be comfortable at home like a good bed. I also try to buy quality items when it's something I use often.


So at least if you are concerned about the IMEI number because of privacy it's easier to change than on a regular phone.


I agree that Windows is insanely hard to use. I helped someone get their new windows computer up and running and I spent more than an hour figuring how to make it not open MSN.com every time it booted, I had to edit some registry key.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: