Rationale for Kaml Proxy in Kamal v2 #964
Replies: 4 comments 2 replies
-
|
I am also wondering about this issue
|
Beta Was this translation helpful? Give feedback.
-
|
A bit of research yielded this blog post: https://nts.strzibny.name/kamal-proxy/ I found it helpful. That said, I would be very curious to hear some of the points from the comment addressed, in case there are truly some shortcomings that might be overlooked. |
Beta Was this translation helpful? Give feedback.
-
|
I found the original idea #940
So it's wrong implementation if the OP uses it on many servers |
Beta Was this translation helpful? Give feedback.
-
|
Kamal Proxy was introduced to simplify both SSL certificate provisioning and multi-apps on a box deployment without needing any Traefik configuration. It also allowed us to build an integrated solution for gapless deployments that is faster than the old polling setup. We use the same LE auto provisioning approach for all of ONCE. It's worked great for thousands of installations. But you don't need to use it. You can provision your own certs and provide that. Or put caddy or Cloudflare or whatever in front to do SSL termination. I don't think most people need that, and I think it's more important to compress the complexity surrounding all of this. But whatever floats your boat. If you're already a Traefik or Caddy expert, feel free to stick that in front. |
Beta Was this translation helpful? Give feedback.
-
|
i use caddy for the awesome auto-issuance of certificates for wildcard hosts. i currently manage that installation outside of Kamal (just started playing around with Kamal). as soon as i have a working solution am happy to share, but would be keen to see others' implementations as well / expansions to the docs as i'm not a docker/sys admin expert by any means 😅 |
Beta Was this translation helpful? Give feedback.
-
|
I'd be keen to see your Caddyfile. I need to issue certs for arbitrary domain names though I do know the complete list as it's stored in a database. My plan is to have Caddy > Kamal Proxy since that requires changing the least configuration. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Hi,
I was just reading about Kamal 2 and Kamal Proxy in this Hacker News thread: https://news.ycombinator.com/item?id=41608350
In that thread, the following comment was made about the use of Kamal Proxy:
I was wondering if anyone from the project could give a rationale for why Trafeik was dropped in favor of rolling a custom solution. I tried searching in the kamal-proxy repo and and related PRs but couldn't find much.
This is a great piece of software and I'm looking forward to using it in my next project. Thank you!
Beta Was this translation helpful? Give feedback.
All reactions