caddy-tls-proxy

Automate Caddy TLS-terminating reverse proxy setup on EC2 with Let's Encrypt.

3|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/ai-enhanced-engineer/aiee-skills --skill caddy-tls-proxy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: caddy-tls-proxy
Source: https://github.com/ai-enhanced-engineer/aiee-skills/tree/main/skills/caddy-tls-proxy
Command: npx skills add https://github.com/ai-enhanced-engineer/aiee-skills --skill caddy-tls-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a streamlined solution for terminating HTTPS on EC2, using Caddy to create a zero-config TLS reverse proxy, with auto-provisioned Let's Encrypt certs and systemd integration.

Core Features & Use Cases

  • Zero-Config TLS Termination: Caddy handles SSL/TLS termination, simplifying the process for single-service deployments.
  • Automated Certificates: Caddy automatically provisions and renews Let's Encrypt certificates.
  • Systemd Integration: Caddy runs as a systemd service, ensuring it starts on boot and manages its lifecycle.
  • Use Case: Ideal for a Dockerized service running on EC2 where you want to avoid the costs and complexity of ALB without using nginx+certbot.

Quick Start

Deploy Caddy as a reverse proxy for your service on EC2 by running: npx aiee-skills install --groups=caddy-tls-proxy.

Frequently Asked Questions about caddy-tls-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a TLS reverse proxy on EC2 for a single-service deployment?

Avoiding AWS ALB for a single Dockerized EC2 service is achievable by using Caddy as a TLS-terminating reverse proxy. This approach handles automatic Let's Encrypt provisioning without ALB costs or nginx+certbot complexity.

How does Caddy handle Let's Encrypt certificate renewal for EC2 instances?

Caddy handles Let's Encrypt certificate renewal automatically by provisioning and renewing certificates natively. It runs as a systemd service on the EC2 instance, ensuring continuous TLS coverage without manual intervention.

Can I use Caddy as a TLS proxy for a Dockerized application on EC2?

Yes, you can use Caddy as a TLS proxy for a Dockerized application on EC2. This Skill configures Caddy to terminate TLS and route traffic to your service, integrating with systemd to manage the proxy lifecycle on boot.

What is the best way to terminate HTTPS on EC2 without using an Application Load Balancer?

The best way to terminate HTTPS on EC2 without an ALB is using a lightweight reverse proxy like Caddy. This setup provides zero-config TLS termination with automated Let's Encrypt certificates, avoiding ALB costs for single-service deployments.

Do I need nginx and certbot to automate SSL certificates on a single EC2 instance?

You do not need nginx and certbot to automate SSL certificates on a single EC2 instance. Caddy provides zero-config automated provisioning and renewal of Let's Encrypt certificates natively, simplifying the TLS proxy setup.