Overview
Caddy (Hardened) on Amazon Linux 2023 is a production-ready, security-hardened image of the Caddy web server and reverse proxy, maintained and supported by Derek Coleman & Associates Incorporated.
This is repackaged open-source software. Caddy is developed by the Caddy project community and is distributed under the Apache License 2.0. This listing is not endorsed by or affiliated with the Caddy project. This product builds Caddy from unmodified upstream source with the current patched Go toolchain (so known standard-library vulnerabilities in prebuilt binaries are absent) on a hardened Amazon Linux 2023 base; the charges associated with this listing are for image hardening, continuous patching, vulnerability scanning, and business-day support - not for the underlying open-source software, which remains free.
Hardening baseline: minimal package footprint, SSH key-only access (password authentication disabled), IMDSv2 enforced, Caddy running as a dedicated non-root user with only the bind capability, host firewall exposing only web ports, and no default credentials anywhere. Automatic HTTPS activates once you configure a real domain in the Caddyfile. Images are rebuilt, scanned for HIGH and CRITICAL vulnerabilities, and republished on a regular cadence so that new launches start current. Configure sites in /etc/caddy/Caddyfile and manage the service with systemd: sudo systemctl restart caddy.
Highlights
- Security-hardened at build time: minimal packages, key-only SSH, IMDSv2-only, non-root service user, firewall enabled with only web ports open.
- Continuously patched: rebuilt, vulnerability-scanned, and republished on a regular cadence.
- Production-ready: systemd-managed Caddy 2.11; automatic HTTPS once you point a domain at your Caddyfile.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Cost/hour |
|---|---|
c7i.xlarge Recommended | $0.46 |
c7i.4xlarge | $1.84 |
c7i.2xlarge | $0.92 |
Vendor refund policy
Usage-based hourly billing; charges stop when instances are terminated. Contact support@dcassociatesgroup.com for billing questions.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
[Important] Initial release. Caddy 2.11 on Amazon Linux 2023, hardened baseline; all OS packages current at build.
Additional details
Usage instructions
Launch from AWS Marketplace (1-Click or EC2 console). Connect via SSH: ssh -i <key> ec2-user@<public-ip>. Edit /etc/caddy/Caddyfile to define your sites (replace the placeholder :80 block with your domain to enable automatic HTTPS), then: sudo systemctl restart caddy. Root login is disabled; use sudo. There are no passwords anywhere in this product.
Support
Vendor support
Support by Derek Coleman & Associates Incorporated. Email: support@dcassociatesgroup.com . Business-day response. Covers image operation, hardening baseline, and launch issues.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.