Sold by: Software Sushi
Deployed on AWS
Free Trial
A Caddy v2.11.7 reverse proxy on Ubuntu 24.04 with HTTPS from its own internal CA, a password-protected sample route and a guide to proxy your own application. Public domain certificates need a few documented changes.
Overview
Put an HTTPS reverse proxy in front of your application. This image runs Caddy v2.11.7 with HTTPS from Caddy's internal CA, a basic-auth protected sample route and a documented way to proxy your own app, so you can start with a working setup.
Launch the approved version on t3.medium with at least 16 GiB encrypted root storage. Connect with AWS Systems Manager as ubuntu or restrict SSH to your administrative CIDR. First boot creates a instance password, Caddyfile and local CA material; nothing sensitive is baked into the image. Caddy listens on loopback HTTP 127.0.0.1:8080 and loopback HTTPS 127.0.0.1:8443. Open the gateway through Session Manager port forwarding. The private API path requires HTTP basic auth; keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. IAM is optional unless you add AWS API integrations or public DNS automation.
Reach it from other machines: Caddy listens on loopback. To serve a real domain, add its site block, grant ports 80 and 443 with a systemd drop-in (AmbientCapabilities=CAP_NET_BIND_SERVICE), open TCP 80 and 443 in the security group and restart Caddy. Software Sushi has not tested public certificate issuance on this image, so try a test domain first.
Copy-paste launch kit (role, security group, run-instances and CloudFormation): https://docs.softwaresushi.com/launch-kit/ and the Caddy HTTPS Gateway guide: https://docs.softwaresushi.com/caddy/
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Matthew Holt and the Caddy contributors author Caddy under Apache-2.0; Software Sushi supplies the AMI recipe, pinned binary verification, first-boot identity and setup documentation without claiming upstream endorsement.
Highlights
- Pinned Caddy v2.11.7 with Sigstore-signed release verification.
- Loopback HTTPS reverse proxy with internal CA and basic-auth private API.
- Bundled configuration, backup and day-2 operations documentation.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
Dimensions summary
This listing uses a single usage-based dimension. You pay an hourly rate for the software while the instance runs on the t3.medium instance type. There are no tiers or size options to choose from—one rate applies for the one supported instance type. Billing stops when the instance stops. AWS charges for EC2, EBS, and data transfer separately from this software fee.
Top-of-mind questions for buyers
The software runs on one t3.medium Amazon EC2 instance. It comes preloaded with Caddy v2.11.7 as the standard build with no extra plugins. All listeners stay on the local loopback address by default, so nothing is exposed to a public interface until you configure it.
The software fee applies by the hour only while the instance runs. When you stop the instance, the hourly software charge stops. AWS may still charge for attached EBS storage on a stopped instance. Those storage and other AWS fees are separate from the software fee.
The hourly fee covers the software only. AWS bills EC2 compute, EBS storage, and data transfer separately. You also supply your own configuration and credentials after launch. Secrets like the basic-auth password and the internal certificate authority generate on your instance at first boot.
docs.softwaresushi.com+1
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are billed by AWS and are not eligible for refund by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Caddy v2.11.7 on Ubuntu 24.04 LTS for t3.medium. Includes loopback HTTP origin, loopback HTTPS reverse proxy with internal CA, basic auth on a private API path, and automatic per-instance TLS setup. Connect with Session Manager as ubuntu and run bash /opt/sushi/docs/demo.sh after first boot.
Additional details
Usage instructions
Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Open https://127.0.0.1:8443/ through port forwarding with /etc/caddy/local-root.crt.
Support
Vendor support
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include Caddy project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Production-ready Hermes AI messaging agent on hardened Ubuntu 24.04. Add your model-provider and Telegram credentials and run it in your AWS account.
A ready OpenTelemetry Collector gateway for traces, metrics and logs. otelcol 0.162.0 on Ubuntu 24.04 receives OTLP over TLS, writes to a local file and is built to take your own exporters. Includes a walkthrough that sends a test span.
LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, with loopback-only HTTPS and a per-instance master key.
Paid production AMI from Software Sushi that packages NVIDIA OpenShell v0.1.2 on Ubuntu 24.04 ARM64 with hardening, first-boot identity, a local mTLS gateway and support contact.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.