Conversation
Notices
-
Embed this notice
i personally use caddy but this time im setting up a server to serve business needs, so caddy or nginx or apache?
-
Embed this notice
@Zergling_man ?
-
Embed this notice
@Zergling_man @munir nginx.
Apache sucks - nginx is better is every way.
-
Embed this notice
@munir httpd
I find apache annoying to work with, not to mention that it seems like it's designed to shoot yourself in the foot.
-
Embed this notice
@Zergling_man @munir It may work just fine for some static HTML files, but it may not meet business needs, while nginx can.
-
Embed this notice
@Suiseiseki @munir What's wrong with httpd
-
Embed this notice
@Suiseiseki @munir Hmm. I thought you could use it as a reverse-proxy too? Not that I've actually played with it much yet. Once I get this rack finished I'm going to shove that box in there and start messing with it again.
-
Embed this notice
@Zergling_man @munir Yes, lighttpd does that too.
nginx does reverse proxying too, but really reverse proxies seem to be always the wrong tool for the wrong job.
-
Embed this notice
@Zergling_man @Suiseiseki mmmmmmmmmm ill stick with caddy,
nginx is complicated af especially on debian deriv servers.
-
Embed this notice
@Suiseiseki @munir I dunno I run all my shit on the one box currently so having a domain selector sitting on 80/443 is mighty convenient.
-
Embed this notice
@Zergling_man @Suiseiseki yeah but the debian sites enabled bullshit is annoying as fuck, i wanna open one config file write everything there and be done with it
-
Embed this notice
@munir @Suiseiseki nginx is hard to learn, but at some point it clicks that it's really not doing all that much, after which it is very simple.
-
Embed this notice
@Zergling_man @Suiseiseki also the automatic certs in caddy are pretty nice :02_lolli:, certbot is a huge pain in the ass, for caddy i just point the domains to the server and certs are issued automatically.
-
Embed this notice
@Suiseiseki @munir (Actually if apt isn't dumb enough to overwrite nginx.conf you can just do everything in there.)
-
Embed this notice
@munir @Suiseiseki You can just do that. It comes like that on arch too and I have long since abandoned it.
Maybe apt will try to restore it every time it updates, because apt is a cocksucker, but you can fix that by just editing nginx.conf to point at some entirely different, unmanaged directory. Unless apt overwrites that too.
-
Embed this notice
@Zergling_man @Suiseiseki it gets them from lets encrypt, which is where everyone gets their certs anyway
-
Embed this notice
@munir @Suiseiseki certbot sucks massive ass, it's true, which is why I wrote my own ACME client.
I would not, for even a second, trust an http server's automatic certs unless I can configure where it gets them from.
-
Embed this notice
@Zergling_man @Suiseiseki okay, where do i get the certs from
-
Embed this notice
@munir @Suiseiseki As expected.
This is a bad thing, you understand.
-
Embed this notice
@Zergling_man @Suiseiseki have fun with the browser warnings 😭
-
Embed this notice
@munir @Suiseiseki Wherever you want.
I am a fan of self-signed certs.