kdruelle/caddy repository overview

⁠📄 Caddy Enhenced

⁠🔌 Embedded Caddy Modules

This Caddy image is built with several modules to extend caddy capabilities in networking, security, and DNS automation.

⁠🌐 DNS Providers

• github.com/caddy-dns/cloudflare⁠
  Enables integration with Cloudflare DNS, mainly used for ACME DNS-01 challenges (Let's Encrypt).

• github.com/caddy-dns/ionos⁠
  Provides DNS support for IONOS, allowing automated certificate management via DNS challenge.

⁠🌍 Networking & IP Handling

• github.com/WeidiDeng/caddy-cloudflare-ip⁠
  Retrieves and trust cloudflare ips from their offical website, ipv4⁠ and ipv6⁠.

• github.com/fvbommel/caddy-combine-ip-ranges⁠
  retrieves IP prefixes from other modules and combines them into a single list of IP prefixes for use in Caddy trusted_proxies directives.

• github.com/mholt/caddy-l4⁠
  Adds Layer 4 (TCP/UDP) support, enabling Caddy to function as a low-level network proxy, not just HTTP.

⁠🛡️ Security

• github.com/corazawaf/coraza-caddy/v2⁠
  Integrates Coraza WAF (OWASP CRS compatible), providing advanced protection against common web attacks (SQL injection, XSS, etc.).

• github.com/greenpau/caddy-security⁠
  Full-featured security module handling authentication, authorization, and identity management (OIDC, JWT, etc.).

⁠🧠 Why these modules?

This setup turns Caddy into:

• a modern reverse proxy
• a secure entry point (WAF + authentication)
• a Layer 4 network proxy
• an automated DNS and certificate manager
• a production-ready edge component (Cloudflare, exposed services, etc.)

⁠⚠️ Note

These modules are compiled directly into the Caddy binary.

To verify which modules are included:

caddy list-modules