- Full support for ZeroSSL, a new ACME CA that is a viable alternative
to Let's Encrypt.
- We now have full control over our ACME stack! By replacing our
previous underlying ACME library (lego) with ACMEz, Caddy can offer:
- faster config reloads
- more efficient cert management at scale
- a more intuitive configuration experience
- lighter builds
- structured logs that are consistent with Caddy's other logs
(which you have fine-grained control over).
- (we no longer suffer from the limitations still shared by other
lego-based ACME clients)
- Integrated support for Prometheus metrics.
- HTTP/2 server push has been re-introduced, this time better than it
was in Caddy 1.
- Warning: The logfmt log encoder has been deprecated and will be removed.
- Customizable DNS resolver for reverse proxy
- Latest HTTP/3 version
- Numerous bug fixes and other enhancements! Notable bug fixes related to:
- ACME DNS challenge providers
- Custom resolvers for the DNS challenge
- ACME EAB (External Account Binding)
- Panic recovery
- Startup time when managing lots of certificates
- Correct port for active health checks (reverse_proxy module)
- Windows paths
- File hiding logic (file_server module)
- Bidirectional streaming (reverse_proxy module; specifically
benefits v2ray use)
- More consistent, structured error logging when produced from
HTTP code in Go's standard library
- New placeholders and log fields, especially pertaining to TLS,
ACME, and HTTP
PR: 249916, 249099
Submitted by: Daniel Tihanyi <daniel.tihanyi@tetragir.com> (maintainer)
Relnotes: https://github.com/caddyserver/caddy/releases/tag/v2.2.0
ccc89e5b67