pkg.sopackage field notes

brew / rank 569

Install caddy with Homebrew

Powerful, enterprise-ready, open source web server with automatic HTTPS. Version 2.11.4 via Homebrew; verified 2026-06-03.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install caddy

provider-native install command

overview

Package summary

Powerful, enterprise-ready, open source web server with automatic HTTPS

Commands and aliases

  • caddy

history

Project history and usage

Caddy is a Go web server and reverse proxy best known for making automatic HTTPS the default behavior. Its modern identity is a self-contained server platform with a JSON-native configuration model, a human-friendly Caddyfile adapter, an admin API, and a module system.

Project history

Caddy's README says Matthew Holt began the project in 2014 while studying computer science at Brigham Young University. The project name reflects its role as a helper that carries the mundane work of serving the Web and keeps multiple concerns organized in one place.

The project differentiated itself by turning HTTPS from an operational chore into the default path. Caddy's feature list highlights automatic HTTPS with Let's Encrypt and ZeroSSL, managed local CAs for internal names, multi-issuer fallback, HTTP/1.1, HTTP/2, HTTP/3, and a plugin/module architecture. Caddy 2.0 was released as production-ready on May 4, 2020, after a redesign around a modular core, JSON config, API-driven reloads, and config adapters.

Adoption history

Caddy moved from developer-friendly web server to widely packaged infrastructure component because it solved TLS automation at the binary level. The official README states it has served trillions of requests and managed millions of TLS certificates, and GitHub shows a large contributor and user community.

Its packaging footprint reflects that adoption: the Homebrew input records Caddy across Homebrew, Debian, Ubuntu, Fedora, Arch, Alpine, Nix, MacPorts, Chocolatey, Scoop, winget, and openSUSE.

How it is used

Caddy is commonly used as an HTTPS static file server, reverse proxy, TLS terminator, local development server, and programmable HTTP platform. Users can run it with a Caddyfile, feed JSON through the admin API, adapt other config formats, or build custom binaries with modules using xcaddy.

Why package nerds care

Caddy matters to package nerds because it is a rare web server whose default install changes operational behavior: a plain binary can obtain and renew certificates, manage local trust, expose an API, and replace common nginx-plus-certbot setups with less glue. It also stresses packaging choices around service files, low-port binding, data directories, custom module builds, and reproducible Go binaries.

Timeline

  • 2014: Matthew Holt begins developing Caddy.
  • 2015: Caddy becomes known for automatic HTTPS by default.
  • 2020-05-04: Caddy 2.0.0 is released as production-ready.
  • 2020s: Caddy's module architecture, admin API, Caddyfile adapter, and automatic certificate management become its core packaged identity.
  • 2026: GitHub README reports v2.11.x releases and continued active development.

Related projects

  • Caddy is closely related to CertMagic, Let's Encrypt, ZeroSSL, xcaddy, and the Caddy module ecosystem. It is often compared with nginx, Apache httpd, Traefik, HAProxy, and certbot-based TLS automation stacks.

security posture

Risk level: orange

formula declares a Homebrew service.

Risk classifier

orange risk · medium confidence · infrastructure

Why

  • formula declares a Homebrew service

Signals

  • metadata:service

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
/etc/caddy/Caddyfile
Unix
Caddyfile

Credential files

Credential-bearing paths to review before unattended agent runs.

Linux
~/.local/share/caddy
macOS
~/Library/Application Support/Caddy
Unix
$XDG_DATA_HOME/caddy
Windows
%AppData%\Caddy

executables

Installed executables

CommandKindExposureNote
caddyexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version2.11.4
manager updated2026-06-03
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:caddy
Version2.11.4
Package managerHomebrew
Homepagehttps://caddyserver.com/
Repositoryhttps://github.com/caddyserver/caddy
Last updated2026-06-03T09:52:05Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation