One front door
Every public request terminates at Caddy on 80/443, which proxies to internal containers that never publish a port of their own.
Self-hosted · ap-southeast-2
A box in Sydney,
running what I build.
A small VPS running containerised web services behind one hardened HTTPS front door. No shared hosting, no third-party platform in the request path.
- Operational
- Caddy edge
- Let's Encrypt TLS
- Docker Compose
Private by default
Dashboards and container management are reachable only across a private mesh network, never from the open internet.
Small and boring
Compose-managed containers on Debian, each with a restart policy, sized for a handful of services rather than a fleet.