greenpau

caddy-security

Go2022–2025

greenpau / caddy-security

caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

Security & Privacy Finance & Commerce

Explore on GitHub Read Hacker News discussions

9Distinct people

10Mentions

0Explicit recommenders

2.3KGitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year10 dated mentions

Observed mentions: 2022-03-22 07:04:07 UTC to 2025-08-14 15:32:17 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Submissions	Comments
2022	2022-01-01 00:00:00 UTC	2023-01-01 00:00:00 UTC	5	0	5
2023	2023-01-01 00:00:00 UTC	2024-01-01 00:00:00 UTC	1	0	1
2024	2024-01-01 00:00:00 UTC	2025-01-01 00:00:00 UTC	3	1	2
2025	2025-01-01 00:00:00 UTC	2026-01-01 00:00:00 UTC	1	0	1

What Hacker News says

10 sources

snickerdoodle12·Aug 14, 2025

In case it helps someone else, this is what I do: FROM caddy:2-builder AS builder RUN xcaddy build \ --with github.com/caddy-dns/cloudflare \ --with github.com/greenpau/caddy-security FROM caddy:2 COPY --from=builder /usr/bin/caddy /usr/bin/caddy COPY Caddyfile /etc/caddy/Caddyfile Then just build & run it via docker compose

In Nginx introduces native support for ACME protocol

Lwrless·Mar 18, 2024Submission

Caddy-Security: Security App and Plugin for Caddy

2 points · Open discussion

tadfisher·Feb 13, 2024

There is no "refusal" as far as I can tell. The issues were reported [1] in September 2023 (as was this blog post) and the simplest one has been fixed (insecure random seed). I'm not aware of any public statements from the plugin maintainers, and there is no hostility in the issue comments. [1]: https://github.com/greenpau/caddy-security/issues?q=is%3Aiss...

In Security flaws in an SSO plugin for Caddy (2023)

natrys·Feb 11, 2024

I also went down this road recently. Personally I had gone with caddy-security[1] which is simply a plugin for Caddy. [1] https://github.com/greenpau/caddy-security

In Keycloak SSO with Docker Compose and Nginx

meblum·Sep 18, 2023

From the timeline: > September 18, 2023: The disclosure blog post was released and issues were filed with the original project repository. I don't see those issues listed in the GitHub project issue tracker https://github.com/greenpau/caddy-security/issues. Have they been deleted?

In Security flaws in an SSO plugin for Caddy

hantusk·Aug 24, 2022

Hm, i found this to be pretty straight forward through Docker: e.g: FROM caddy:2-builder AS builder RUN xcaddy build \ --with github.com/greenpau/caddy-security FROM caddy:2 COPY --from=builder /usr/bin/caddy /usr/bin/caddy You can keep your container image, and just do the "COPY --from=builder" step in there. We do this in CI/CD on every build.

In The future of Nginx: Getting back to our open source roots

mholt·May 4, 2022

For auth and identity stuff, try this plugin: https://github.com/greenpau/caddy-security

In What are your most used self-hosted applications?

Loic·May 4, 2022

Slightly out of topic, but based on Caddy, has anybody experience with Caddy Security[0]? It is very easy to install but hard to find other users. [0]: https://github.com/greenpau/caddy-security

In Keycloak: Open-Source Identity and Access Management

francislavoie·Apr 23, 2022

Yeah, we defer to plugins to provide auth solutions, because it's... a whole thing. It's best maintained outside of the standard distribution, because there's so many ways to approach it. The caddy-oidc plugin you linked was written for Caddy v1, so it's no longer compatible. The most complete auth plugin for Caddy v2 is https://github.com/greenpau/caddy-security, and I think it probably does what you need.

In Using SNI proxying and IPv6 to share port 443 between webapps

Loic·Mar 22, 2022

At the moment I am exploring Caddy Security[0]. I was surprised how simple and elegant the design is. But it is a relatively young project. If some people are using it, I would enjoy their feedback. [0]: https://github.com/greenpau/caddy-security

In Hackers claim to have breached Okta systems