Messages

Hey some time has passed, so did you get it to work? Do you have a running config maybe for exmaple? I reviewed your config and mine is the same, still no authentication. Could you shed some light on how you got it to work? kindly appreciated. Phil

Hello everyone,

I would like to know how you all protect your Caddy reverse proxy websites from brute force attacks that use Basic Authentication. So far, I've been using Fail2Ban, but I don't see a suitable option for this.

Additionally, where can I find logs for failed Basic Authentication attempts? After enabling the "HTTP Access Log" in the domain entry in Caddy, I don't see any failed logins in the files under /var/log/caddy/.

I could activate "Log HTTP Access in JSON Format." Should I then see something in the respective log file under "/var/log/caddy/access"? I've tried it but didn't see anything. :(

It would be a big help if someone could point me in the right direction.

Kind regards,
Phil