From 5bfc166f1ba30d4c9ce01aae46f89aa1b19b5b36 Mon Sep 17 00:00:00 2001
From: AJ ONeal <aj@therootcompany.com>
Date: Fri, 21 Oct 2022 22:34:40 +0000
Subject: [PATCH] docs(caddy): a few more updates

---
 caddy/README.md | 69 +++++++++++++++++++++++++++++++++++--------------
 1 file changed, 50 insertions(+), 19 deletions(-)

diff --git a/caddy/README.md b/caddy/README.md
index 8c26ad5..adba63a 100644
--- a/caddy/README.md
+++ b/caddy/README.md
@@ -26,9 +26,18 @@ Here's the things we find most useful:
 ### How to serve a directory
 
 ```sh
-caddy file-server --browse --listen :4040
+caddy file-server --browse --listen :443
 ```
 
+### How to serve via Caddyfile
+
+```sh
+caddy run --config ./Caddyfile
+```
+
+Note: `run` runs in the foreground, `start` starts a background service (daemon)
+in the background.
+
 ### How to serve HTTPS on localhost
 
 Caddy can be used to test with https on localhost.
@@ -37,20 +46,50 @@ Caddy can be used to test with https on localhost.
 
 ```Caddyfile
 localhost {
-    handle /api/* {
-        reverse_proxy localhost:3000
-    }
-
     handle /* {
         root * ./public/
         file_server
     }
+    handle /api/* {
+        reverse_proxy localhost:3000
+    }
 }
 ```
 
-```sh
-caddyfile run --config ./Caddyfile
-```
+### How to serve on Linux/VPS (systemd)
+
+1. Create a generic `Caddyfile`
+   ```sh
+   mkdir -p ~/srv/caddy
+   echo '
+   # Generically vhost all domains pointed at this server
+   https:// {
+       tls {
+           on_demand
+       }
+       handle /* {
+           file_server
+           root * /home/app/srv/www/{host}/public/
+       }
+   }
+   ' > ~/srv/caddy/Caddyfile
+   ```
+2. Install serviceman
+   ```sh
+   webi serviceman
+   source ~/.config/envman/PATH.env
+   ```
+3. Install caddy as a system service
+   ```sh
+   sudo env PATH="$PATH" \
+       serviceman add --system --username "$(whoami)" --name caddy -- \
+           caddy run --config ~/srv/caddy/Caddyfile
+   ```
+
+Note: In this example any host that points to the server and has files in
+`~/srv/www/{host}/public` can be served without additional changes.
+
+Note: More on using `systemctl` below.
 
 ### How to redirect and reverse proxy
 
@@ -146,15 +185,6 @@ example.com {
 }
 ```
 
-### How to run caddy
-
-```sh
-caddy run --config ./Caddyfile
-```
-
-Note: `run` runs in the foreground, `start` starts a service (daemon) in the
-background.
-
 ### How to start Caddy as a Linux service
 
 Here are the 3 things you need to do to start Caddy as a system service:
@@ -168,10 +198,11 @@ Using a user named `app` to run your services is common industry convention.
 
 **port-binding privileges**
 
-You can use `setcap` to allow Caddy to use privileged ports.
+You can use `setcap` or [`setcap-netbind`](/setcap-netbind) to allow Caddy to
+use privileged ports.
 
 ```sh
-sudo setcap cap_net_bind_service=+ep $(readlink -f $(command -v caddy))
+sudo setcap cap_net_bind_service=+ep "$(readlink -f "$(command -v caddy)")"
 ```
 
 **systemd config**