Caddy Web Server - Automatic HTTPS Reverse Proxy by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Caddy is the open source web server and reverse proxy written in Go that makes HTTPS automatic. This AMI delivers Caddy 2 fully installed and configured on a hardened base, so a working web server is up and serving within minutes of launch - no package management, repository setup, or manual certificate tooling required.

Unlike Nginx or Apache AMIs that require manual Certbot installation, cron-based renewal scripts, and separate TLS configuration, this image handles certificate provisioning and renewal natively. Compared to a DIY Caddy install, you skip systemd service creation, repository configuration, and storage layout decisions. The result: fewer moving parts, fewer maintenance tasks, and a faster path from launch to production HTTPS.

• Caddy 2 web server installed from the official Caddy team repository, enabled as a systemd service that starts on boot
• Default site configuration serving a landing page over HTTP on port 80, ready to edit
• Separate data volume for web content, independently resizable and kept off the OS disk
• File-based configuration with a loopback-only admin API - no exposed admin interface or passwords to manage
• First-boot info file recording listening ports and configuration paths for immediate orientation

Caddy provisions and renews TLS certificates automatically via Let's Encrypt or ZeroSSL. Point an Amazon Route 53 DNS record (or any DNS provider) at the instance, add the domain to the Caddyfile, reload the service, and Caddy obtains a publicly trusted certificate on the first request and keeps it renewed. There is no separate certificate client to install or schedule.

• Amazon Route 53 - Create an A record pointing to your instance for automatic HTTPS domain validation
• Amazon EBS - The dedicated web content volume uses EBS, allowing snapshots, encryption at rest, and independent resizing
• Amazon CloudWatch - Forward Caddy access and error logs for centralized monitoring and alerting
• Elastic Load Balancing - Place Caddy behind an ALB or NLB for multi-instance deployments
• AWS Systems Manager - Manage configuration updates and patching across fleets without direct SSH

The document root and site files live on a separate, independently resizable EBS volume. This architecture keeps web content off the operating system disk so storage can be grown, snapshotted, or encrypted without disturbing the rest of the instance.

• Loopback-only admin API prevents remote management exposure
• No default passwords or web-based admin panels
• Automatic TLS with publicly trusted certificates
• Separate data volume supports EBS encryption at rest
• Minimal installed package set to reduce attack surface

• Static website and SPA hosting - Deploy marketing sites or single page applications with automatic HTTPS in under five minutes
• Reverse proxy for application backends - Route traffic to multiple backend services (Node.js, Python, Go) running on the same instance or across a VPC, with automatic TLS termination
• Automatic HTTPS termination for internal services - Provide trusted certificates for internal APIs without managing a PKI
• API gateway and edge routing - Use Caddy's matcher and handler system to route, rewrite, and load balance API requests

24/7 technical support by email and live chat. Our engineers help with web server configuration, reverse proxy setup, automatic HTTPS, virtual hosts, upgrades, and AWS integration questions. Critical issues receive a one-hour average response.

To discuss your deployment before purchasing, start a live chat or email our team for a free configuration walkthrough.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.