Docker Dynamic Upstreams for Caddy.

This package implements a docker dynamic upstreams module for Caddy.

Requires Caddy 2+.

Installation

Download from official website or build yourself using xcaddy.

Here is a Dockerfile example.

FROM caddy:<version>-builder AS builder

RUN xcaddy build \
    --with github.com/invzhi/caddy-docker-upstreams

FROM caddy:<version>

COPY --from=builder /usr/bin/caddy /usr/bin/caddy

Caddyfile Syntax

List all your domain or use On-Demand TLS.

app1.example.com,
app2.example.com,
app3.example.com {
    reverse_proxy {
        dynamic docker
    }
}

Docker Labels

This module requires the Docker Labels to provide the necessary information.

Label	Description
com.caddyserver.http.enable	required, should be true
com.caddyserver.http.network	optional, specify the docker network which caddy connecting through (if it is empty, the first network of container will be specified)
com.caddyserver.http.upstream.port	required, specify the port

As well as the labels corresponding to the matcher.

Label	Matcher
com.caddyserver.http.matchers.protocol	protocol
com.caddyserver.http.matchers.host	host
com.caddyserver.http.matchers.method	method
com.caddyserver.http.matchers.path	path
com.caddyserver.http.matchers.query	query
com.caddyserver.http.matchers.expression	expression

Here is a docker-compose.yml example with vaultwarden.

vaultwarden:
  image: vaultwarden/server:${VAULTWARDEN_VERSION:-latest}
  restart: unless-stopped
  volumes:
    - ${VAULTWARDEN_ROOT}:/data
  labels:
    com.caddyserver.http.enable: true
    com.caddyserver.http.upstream.port: 80
    com.caddyserver.http.matchers.host: vaultwarden.example.com
  environment:
    DOMAIN: https://vaultwarden.example.com

Docker Client

Environment variables could configure the docker client:

• DOCKER_HOST to set the URL to the docker server.
• DOCKER_API_VERSION to set the version of the API to use, leave empty for latest.
• DOCKER_CERT_PATH to specify the directory from which to load the TLS certificates ("ca.pem", "cert.pem", "key.pem').
• DOCKER_TLS_VERIFY to enable or disable TLS verification (off by default).