macOS
brew install caddyprovider-native install command
brew / rank 569
Powerful, enterprise-ready, open source web server with automatic HTTPS. Version 2.11.4 via Homebrew; verified 2026-06-03.
install
brew install caddyprovider-native install command
overview
Powerful, enterprise-ready, open source web server with automatic HTTPS
history
Caddy is a Go web server and reverse proxy best known for making automatic HTTPS the default behavior. Its modern identity is a self-contained server platform with a JSON-native configuration model, a human-friendly Caddyfile adapter, an admin API, and a module system.
Caddy's README says Matthew Holt began the project in 2014 while studying computer science at Brigham Young University. The project name reflects its role as a helper that carries the mundane work of serving the Web and keeps multiple concerns organized in one place.
The project differentiated itself by turning HTTPS from an operational chore into the default path. Caddy's feature list highlights automatic HTTPS with Let's Encrypt and ZeroSSL, managed local CAs for internal names, multi-issuer fallback, HTTP/1.1, HTTP/2, HTTP/3, and a plugin/module architecture. Caddy 2.0 was released as production-ready on May 4, 2020, after a redesign around a modular core, JSON config, API-driven reloads, and config adapters.
Caddy moved from developer-friendly web server to widely packaged infrastructure component because it solved TLS automation at the binary level. The official README states it has served trillions of requests and managed millions of TLS certificates, and GitHub shows a large contributor and user community.
Its packaging footprint reflects that adoption: the Homebrew input records Caddy across Homebrew, Debian, Ubuntu, Fedora, Arch, Alpine, Nix, MacPorts, Chocolatey, Scoop, winget, and openSUSE.
Caddy is commonly used as an HTTPS static file server, reverse proxy, TLS terminator, local development server, and programmable HTTP platform. Users can run it with a Caddyfile, feed JSON through the admin API, adapt other config formats, or build custom binaries with modules using xcaddy.
Caddy matters to package nerds because it is a rare web server whose default install changes operational behavior: a plain binary can obtain and renew certificates, manage local trust, expose an API, and replace common nginx-plus-certbot setups with less glue. It also stresses packaging choices around service files, low-port binding, data directories, custom module builds, and reproducible Go binaries.
security posture
formula declares a Homebrew service.
orange risk · medium confidence · infrastructure
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
/etc/caddy/CaddyfileCaddyfileCredential-bearing paths to review before unattended agent runs.
~/.local/share/caddy~/Library/Application Support/Caddy$XDG_DATA_HOME/caddy%AppData%\Caddyexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
caddy | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:caddy |
|---|---|
| Version | 2.11.4 |
| Package manager | Homebrew |
| Homepage | https://caddyserver.com/ |
| Repository | https://github.com/caddyserver/caddy |
| Last updated | 2026-06-03T09:52:05Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.