Vanilla_PuddinFudgeMay 8, 2025

Need some help with geoblocking caddy.

https://infosec.pub/post/27936771

Need some help with geoblocking caddy. - Infosec.Pub

I did the whole xcaddy routine with the plugin and I moved it into /usr/bin and it works, displays my site, but I’m not blocking anything. I figure someone might spot my blunder in my config, so here it is. jellyfin.nunya.biz { reverse_proxy mydude:8096 @mygeofilter { maxmind_geolocation { db_path "/mnt/geoip/GeoLite2-Country_20250502/GeoLite2-Country.mmdb allow_countries US } } }

Show threadirmadlad

I have a question about xcaddy, if anyone would be so kind as to school me. I too would like to geoblock with Caddy. I have investigated the process and of course it uses xcaddy. Having no knowledge of xcaddy, how does that work? Is xcaddy for building modules for Caddy? Does it run separately or in conjunction with Caddy? Does it interfere with Caddy in any way. My hesitation stems from the embarrassingly long time it took for me to wrap my noodle around how Caddy works. IKR? Now it seems so simple, but I’d like very much not to mess up my Caddy installation fat fingering my way through xcaddy. Yes, I know screw ups build knowledge bases, but I’m really trying to be careful and not go in like a bull in a china closet.

'presh

May 11, 2025 at 12:23amWeb
Show threadmikMay 11, 2025
Xcaddy is a build tool. Caddy plugins are built into Caddy itself for optimization purposes, so xcaddy essentially makes you a custom version of Caddy. It only conflicts with Caddy so much as building a new version would conflict with the old version. You still get a normal “Caddy” executable after running xcaddy, just replace your existing Caddy with the new one created by xcaddy!
Show threadVanilla_PuddinFudgeMay 11, 2025
I disabled and removed Ubuntu’s caddy before using xcaddy, then remade caddy.service and wrote up a small script to update it when I need. I may automate it down the line.
Show threadirmadladMay 11, 2025
Hmm that sounds like something you could do with n8n.
Show threadmikMay 11, 2025
It probably would be easier to just write an “update Caddy” script. They don’t release updates very often, except for security fixes, so it’s not much effort to do manually. I automated mine with Forgejo Actions, you could do the same with GitHub actions as a free option for example. Lots of neat ways to accomplish this!
Show threadirmadladMay 11, 2025
Hey mik, thanks for that. Geoblocking with Caddy was on my list, and I can now bump it up to the front.