Automatic HTTPS
Caddy automatically enables HTTPS for all your sites, given that some reasonable criteria are met:
- The host is not empty, not localhost, not a wildcard, and not an IP address
- The port is not explicitly 80
- The scheme is not explicitly http
- TLS is not turned off in site's definition
- Certificates and keys are not provided by you
- Caddy is able to bind to ports 80 and 443 (unless you use the DNS challenge)
Caddy will also redirect all HTTP requests to their HTTPS equivalent if the plaintext variant of the hostname is not defined in the Caddyfile.
All pertinent assets are fully managed, including renewals—no action is required by you. Here's a 28-second video showing how it works: