Caddy might just be the perfect example of software "engineers" and SREs getting not just dumber but dangerously incompetent.

"Makes your site more secure!!!"
Okay so how do I restrict an endpoint based on IP or user-agent?
"Oh, you just <vague gesturing>."
That's not an answer. And your documentation looks like it was vibe coded and is half wrong.
"You're just too dumb!!"
And that's why it takes me 5 seconds to do it in nginx, which you complain is 'too hard' to use and administer.

By the way, the reason Caddy feels like vibe coded trash?

Is because it is a statement of fact that it is.

Yep. Current sweetheart of not-Apache webservers is completely vibe-coded and proudly brags about using "Warp" which makes it "easy" to use multiple "AI agents."

@rootwyrm we despise caddy because it's untroubleshootable garbage. nice to know that it's also slop
@atax1a oh, it's not just impossible to troubleshoot. It also fails every one of the most *BASIC* security processes around certificates. Badly. CA management? Private key control? Naaaaaaaaah. You don't need those.