Recently it’s come to my attention that Caddy has an AI sponsor so I have been looking at moving away from Caddy.
I’m currently looking for another reverse proxy to use in place of Caddy. For TLS I am looking into using CertBot and it appears there’s a module (https://github.com/desec-io/certbot-dns-desec) I can use that works for https://desec.io/ to handle my certs.
I have two questions, the first is about CertBot. Since Caddy is handling my certs automatically, how often would I want to renew my certs? Desec.io has this command to obtain a cert:
certbot certonly \
--authenticator dns-desec \
--dns-desec-credentials /etc/letsencrypt/secrets/$DOMAIN.ini \
-d "$DOMAIN" \
-d "*.$DOMAIN"
Would I be required to run the same command periodically to renew my cert?
My second question is a bit more open ended. I am looking to hear any suggestions or experiences about different reverse proxies that are preferably free of AI. There is a list here with some suggested alternatives: https://codeberg.org/ethical-foss/open-slopware#web-servers
You must log in or register to comment.
Not glamour but
haproxymay be worth the look.I use Traefik as my reverse proxy and it deals with my certs automatically.
Keep in mind just because Caddy has an AI sponsor, it doesn’t mean they are using ai products, it could be the AI platform is using caddy and gave done the bare minimum of sponsoring the project.
Traefik merge code written by AI, f.e. https://github.com/traefik/traefik/pull/13397
As do Caddy, such as https://github.com/caddyserver/caddy/pull/7492 and https://github.com/caddyserver/caddy/pull/7666I personally feel like taking money from an AI sponsor is enabling behaviour. From that perspective, I do not want to support that type of behaviour.
I believe that it’s impossible to avoid ai generated or ai committed or ai designed or ai helped code. Or will very soon be.
Better to learn to cope with it.
Impossible? There are people who still write code by hand. There are people who oppose AI, some more actively (or destructively) than others.
Harder to avoid seems like a more reasonable take.
However I am coping, by actively seeking, talking about and supporting alternatives with the hope of spreading that knowledge to those who would like to avoid the use of AI or enable those who support AI.
Human creativity has a much longer and far more interesting history when compared to AI or machine learning. AI hasn’t always existed and does not need to have complete influence over our future.
Apache has mod_md, a built-in LetsEncrypt-compatible module that requires very little configuration and no external daemons or cron jobs: https://httpd.apache.org/docs/2.4/mod/mod_md.html Three lines per virtual host: MDomain, MDContactEmail and MDCertificateAgreement. Using it in production for three years without any issue. I don’t know what’s Apache stance on LLMs, I guess neither for nor against.
I’m fairly certain NPM (nginx proxy manager) doesn’t have any llm use inherently within the project, not sure on financial support. Other people have made context providers to use an LLM with NPM, but I don’t believe the core package itself does.
May be what meets your reqs.
I’ve used NPM before and it is quite simple and easy to use, however I do have a preference for CLI tools
Just use nginx and certbot manually then, its just a pretty front end for them after all.
npm is just a wrapper for nginx
I think pivoting to BSD is the easiest way to find solutions that aren’t tainted by AI.
https://www.openbsdhandbook.com/relayd/An example of OpenBSD denying AI code contributions:
https://marc.info/?l=openbsd-tech&m=177411620801633&w=2edit: Seems even OpenBSD is tainted nowadays, from your own link https://github.com/openbsd/src/commit/9c2b8e445a0bdfafdd6148b1760f00aa5429627b and https://github.com/openbsd/src/commit/e9af5eb5a61d189327b553b24d0d31f19c64b63f
edit 2: Here’s the only relevant mail threads I found regarding the AI contributions in openbsd
https://marc.info/?l=openbsd-misc&m=177513420401322&w=2
https://marc.info/?l=openbsd-misc&m=177573214912349&w=2Respectable, but why not NGINX?
They seem to merge AI code too, from OPs codeberg link: https://github.com/nginx/nginx/pull/1451
I’m a gui pleb, so I do all my selfhosting through dokploy, which uses traefik under the hood and I’m quite happy with it so far.
