mikematera/caddy-gcs-proxy repository overview

⁠A Proxy Server for GCS

This is Caddy configured to proxy requests to a GCS bucket. I use it to get SSL termination more cheaply than the official document Hosting a Static Website on GCS⁠. Setting up HTTPS load balancing⁠ costs about $20 per month which raises my cost from just pennies a month.

⁠Automatic SSL Termination on CloudRun

Google Cloud Run⁠ is a system for running stateless containers. When your containers are not getting requests they spin down, like AppEngine. Cloud Run services can be mapped to a custom domain⁠ with automatic SSL termination handled by Google.

This container simply rewrites requests and proxies them to Google's servers that handle storage bucket requests.

⁠Cost

Cloud Run has a free tier that makes low traffic sites free to do this way. If you keep an instance running all the time so you don't get cold starts and the cost depends on how much time it spends idle, so it's still pretty cheap. I just tried this so I don't have data yet!

⁠Limitations

Sites served this way are served from a single Google region.

⁠How To

⁠Step 1: Create the Container

Here's the guide to deploying containers⁠.

Change my-bucket-name to any GCS bucket name in the next command to run the proxy:

gcloud run deploy caddy-proxy \
    --image docker.io/mikematera/caddy-gcs-proxy:latest \
    --set-env-vars=STORAGE_BUCKET_NAME=my-bucket-name

You can proxy any public bucket and possibly private buckets in the same project. I haven't tried that.

⁠Step 2: Map the Domain

Here's the guide to mapping custom domains⁠.

Update this command with your domain:

gcloud beta run domain-mappings create --service caddy-proxy --domain www.yourdomain.com