# Install caddy with Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, scoop, winget, zypper

Powerful, enterprise-ready, open source web server with automatic HTTPS. Version 2.11.4 via Homebrew; verified 2026-06-03.

## Install

```sh
sudo av install brew:caddy
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install caddy
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install caddy
```

  Evidence: MacPorts ports tree: www/caddy/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add caddy
```

  Evidence: Alpine Linux edge package indexes: caddy from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install caddy
```

  Evidence: Debian stable package indexes: caddy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install caddy
```

  Evidence: Fedora Rawhide package metadata: caddy from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#caddy
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ca/caddy/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S caddy
```

  Evidence: Arch Linux sync databases: caddy from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install caddy
```

  Evidence: openSUSE Tumbleweed package metadata: caddy from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install caddy
```

  Evidence: Chocolatey community package catalog: caddy from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','bluejeansapp'

- Scoop (92%):

```sh
scoop install main/caddy
```

  Evidence: Scoop official bucket manifest trees: bucket/caddy.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id CaddyServer.Caddy -e
```

  Evidence: Windows Package Manager source index: CaddyServer.Caddy from https://cdn.winget.microsoft.com/cache/source.msix

## Package facts

- **Package key:** brew:caddy
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/caddy>
- **Version:** 2.11.4
- **Source summary:** Powerful, enterprise-ready, open source web server with automatic HTTPS
- **Homepage:** <https://caddyserver.com/>
- **Repository:** <https://github.com/caddyserver/caddy>
- **Upstream docs:** <https://caddyserver.com/docs>
- **License:** Apache-2.0
- **Source archive:** <https://github.com/caddyserver/caddy/archive/refs/tags/v2.11.4.tar.gz>
- **Last updated:** 2026-06-03T09:52:05Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- caddy (cli)
- caddy (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Service: declared
- Caveats: When running the provided service, caddy's data dir will be set as `$HOMEBREW_PREFIX/var/lib` instead of the default location found at https://caddyserver.com/docs/conventions#data-directory
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.11.4
- Package-manager updated: 2026-06-03
- Local data: ok
- Upstream repository: https://github.com/caddyserver/caddy
- Upstream latest detected: v2.11.4 (current)
## Project history and usage

Caddy is a Go web server and reverse proxy best known for making automatic HTTPS the default behavior. Its modern identity is a self-contained server platform with a JSON-native configuration model, a human-friendly Caddyfile adapter, an admin API, and a module system.

### Project history

Caddy's README says Matthew Holt began the project in 2014 while studying computer science at Brigham Young University. The project name reflects its role as a helper that carries the mundane work of serving the Web and keeps multiple concerns organized in one place.

The project differentiated itself by turning HTTPS from an operational chore into the default path. Caddy's feature list highlights automatic HTTPS with Let's Encrypt and ZeroSSL, managed local CAs for internal names, multi-issuer fallback, HTTP/1.1, HTTP/2, HTTP/3, and a plugin/module architecture. Caddy 2.0 was released as production-ready on May 4, 2020, after a redesign around a modular core, JSON config, API-driven reloads, and config adapters.

### Adoption history

Caddy moved from developer-friendly web server to widely packaged infrastructure component because it solved TLS automation at the binary level. The official README states it has served trillions of requests and managed millions of TLS certificates, and GitHub shows a large contributor and user community.

Its packaging footprint reflects that adoption: the Homebrew input records Caddy across Homebrew, Debian, Ubuntu, Fedora, Arch, Alpine, Nix, MacPorts, Chocolatey, Scoop, winget, and openSUSE.

### How it is used

Caddy is commonly used as an HTTPS static file server, reverse proxy, TLS terminator, local development server, and programmable HTTP platform. Users can run it with a Caddyfile, feed JSON through the admin API, adapt other config formats, or build custom binaries with modules using xcaddy.

### Why package nerds care

Caddy matters to package nerds because it is a rare web server whose default install changes operational behavior: a plain binary can obtain and renew certificates, manage local trust, expose an API, and replace common nginx-plus-certbot setups with less glue. It also stresses packaging choices around service files, low-port binding, data directories, custom module builds, and reproducible Go binaries.

### Timeline

- 2014: Matthew Holt begins developing Caddy.
- 2015: Caddy becomes known for automatic HTTPS by default.
- 2020-05-04: Caddy 2.0.0 is released as production-ready.
- 2020s: Caddy's module architecture, admin API, Caddyfile adapter, and automatic certificate management become its core packaged identity.
- 2026: GitHub README reports v2.11.x releases and continued active development.

### Related projects

- Caddy is closely related to CertMagic, Let's Encrypt, ZeroSSL, xcaddy, and the Caddy module ecosystem. It is often compared with nginx, Apache httpd, Traefik, HAProxy, and certbot-based TLS automation stacks.

### Sources

- <https://caddyserver.com/docs/>
- <https://caddyserver.com/docs/architecture>
- <https://github.com/caddyserver/caddy#readme>
- <https://github.com/caddyserver/caddy/releases/tag/v2.0.0>
- source_facts.package-manager


## Security Notes

formula declares a Homebrew service.

- **Geiger risk:** orange / medium
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Linux: /etc/caddy/Caddyfile
- Unix: Caddyfile

## Credential files

- Linux: ~/.local/share/caddy
- macOS: ~/Library/Application Support/Caddy
- Unix: $XDG_DATA_HOME/caddy
- Windows: %AppData%\Caddy
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** caddy
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - caddy - 2.6.2-12+b3: normalized package name match | Debian stable package indexes: caddy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Fast, lightweight web server with automatic HTTPS | https://github.com/caddyserver/caddy
- Nix - caddy: normalized package name match | nixpkgs package indexes: pkgs/by-name/ca/caddy/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - caddy - 2.6.2-6: normalized package name match | Ubuntu 24.04 LTS package indexes: caddy from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Fast, lightweight web server with automatic HTTPS | https://github.com/caddyserver/caddy
- apk - caddy - 2.11.4-r0: normalized package name match | Alpine Linux edge package indexes: caddy from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fast, multi-platform web server with automatic HTTPS | https://caddyserver.com/
- apk - caddy-openrc - 2.11.4-r0: normalized package name match | Alpine Linux edge package indexes: caddy-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fast, multi-platform web server with automatic HTTPS (OpenRC init scripts) | https://caddyserver.com/
- dnf - caddy - 2.10.2-5.fc44: normalized package name match | Fedora Rawhide package metadata: caddy from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Web server with automatic HTTPS | https://caddyserver.com
- pacman - caddy - 2.11.3-1: normalized package name match | Arch Linux sync databases: caddy from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Fast web server with automatic HTTPS | https://github.com/caddyserver/caddy
- zypper - caddy - 2.11.3-1.1: normalized package name match | openSUSE Tumbleweed package metadata: caddy from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Fast, multi-platform web server with automatic HTTPS | https://caddyserver.com/
- zypper - caddy-bash-completion - 2.11.3-1.1: normalized package name match | openSUSE Tumbleweed package metadata: caddy-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Bash Completion for caddy | https://caddyserver.com/
- zypper - caddy-fish-completion - 2.11.3-1.1: normalized package name match | openSUSE Tumbleweed package metadata: caddy-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Fish Completion for caddy | https://caddyserver.com/
- zypper - caddy-zsh-completion - 2.11.3-1.1: normalized package name match | openSUSE Tumbleweed package metadata: caddy-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | ZSH Completion for caddy | https://caddyserver.com/
- MacPorts - caddy: normalized package name match | MacPorts ports tree: www/caddy/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Chocolatey - caddy: normalized package name match | Chocolatey community package catalog: caddy from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','bluejeansapp'
- Scoop - main/caddy: normalized package name match | Scoop official bucket manifest trees: bucket/caddy.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
- winget - CaddyServer.Caddy: normalized package name match | Windows Package Manager source index: CaddyServer.Caddy from https://cdn.winget.microsoft.com/cache/source.msix


## Related links

- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [mighttpd2](https://www.automicvault.com/pkg/brew/mighttpd2/) - Shares av.db curated category or tags: cli, http-server, networking, reverse-proxy, web-server.
- [ferron](https://www.automicvault.com/pkg/brew/ferron/) - Shares av.db curated category or tags: cli, networking, tls, web-server.
- [httpd](https://www.automicvault.com/pkg/brew/httpd/) - Shares av.db curated category or tags: cli, networking, tls, web-server.
- [lighttpd](https://www.automicvault.com/pkg/brew/lighttpd/) - Shares av.db curated category or tags: cli, http-server, networking, web-server.
- [nginx](https://www.automicvault.com/pkg/brew/nginx/) - Shares av.db curated category or tags: cli, networking, reverse-proxy, web-server.
- [webfs](https://www.automicvault.com/pkg/brew/webfs/) - Shares av.db curated category or tags: cli, http-server, networking, web-server.
- [algernon](https://www.automicvault.com/pkg/brew/algernon/) - Shares av.db curated category or tags: cli, networking, web-server.
- [darkhttpd](https://www.automicvault.com/pkg/brew/darkhttpd/) - Shares av.db curated category or tags: cli, http-server, networking, web-server.

## Combined YAML source

View the package source record on GitHub. [combined/caddy.yml](https://github.com/automic-vault/db/blob/main/combined/caddy.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
