Caddy + Let's Encrypt , certificate not propagated

[Pete5]

Hi all,

I configured the ACME client on my opnsense to fetch a let's encrypt wildcard certificate. That works so far.

I have caddy installed to propagate this wildcard certificate for my services like nextcloud etc. I followed the instructions shown here
https://docs.opnsense.org/manual/how-tos/caddy.html#
For my wildcard domain (*.mydomain.de) i selected the corresponding certificate (mydomain.de (ACME Client)

I configured my services as subdomains as instructed here
https://docs.opnsense.org/manual/how-tos/caddy.html#wildcard-domain-with-subdomains

For local DNS I use Unbound.

When I call up the web page of my services the connection is not secured accompanied by the corresponding certificate warning.
To me it looks like caddy doesn't propagate the certificate, but i don't know why?

The caddy files look like this:

Caddyfile

Code Select Expand

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
level DEBUG
}

servers {
protocols h1 h2
}

email webmaster@mydomain.de
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


*.mydomain.de {
tls /usr/local/etc/caddy/certificates/618398dcf287e.pem /usr/local/etc/caddy/certificates/618398dcf287e.key {
}
}

tnas.mydomain.de {
handle {
reverse_proxy https://192.168.64.21 {
}
}
}

wallbox.mydomain.de {
handle {
reverse_proxy https://192.168.65.245 {
transport http {
tls_insecure_skip_verify
}
}
}
}

import /usr/local/etc/caddy/caddy.d/*.conf

JSON Config

Code Select Expand

# DO NOT EDIT THIS FILE -- OPNsense auto-generated file


# caddy_user=root

# Global Options
{
log {
output net unixgram//var/run/caddy/log.sock {
}
format json {
time_format rfc3339
}
level DEBUG
}

servers {
protocols h1 h2
}

email webmaster@mydomain.de
grace_period 10s
skip_install_trust
import /usr/local/etc/caddy/caddy.d/*.global
}

# Reverse Proxy Configuration


*.mydomain.de {
tls /usr/local/etc/caddy/certificates/618398dcf287e.pem /usr/local/etc/caddy/certificates/618398dcf287e.key {
}
}

tnas.mydomain.de {
handle {
reverse_proxy https://192.168.64.21 {
}
}
}

wallbox.mydomain.de {
handle {
reverse_proxy https://192.168.65.245 {
transport http {
tls_insecure_skip_verify
}
}
}
}

import /usr/local/etc/caddy/caddy.d/*.conf

My caddy log file

Code Select Expand

2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "info","ts":"2026-10-24T05:35:49Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:49 Error caddy "debug","ts":"2026-10-24T05:35:49Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "info","ts":"2026-10-24T05:35:12Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:12 Error caddy "debug","ts":"2026-10-24T05:35:12Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "info","ts":"2026-10-24T05:32:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:32:30 Error caddy "debug","ts":"2026-10-24T05:32:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:31:25 Warning caddy "warn","ts":"2026-10-24T05:31:25Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "info","ts":"2026-10-24T05:24:53Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:24:53 Error caddy "debug","ts":"2026-10-24T05:24:53Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:18:08 Warning caddy "info","ts":"2026-10-24T05:18:08Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Error caddy "debug","ts":"2026-10-24T05:18:08Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "info","ts":"2026-10-24T05:11:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:11:30 Error caddy "debug","ts":"2026-10-24T05:11:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "info","ts":"2026-10-24T05:03:24Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:24 Error caddy "debug","ts":"2026-10-24T05:03:24Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "info","ts":"2026-10-24T05:03:22Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:22 Error caddy "debug","ts":"2026-10-24T05:03:22Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "info","ts":"2026-10-24T05:01:41Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}

Any ideas what could be wrong?

[Pete5]

My caddy log file

Code Select Expand

2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:49 Warning caddy "info","ts":"2026-10-24T05:35:49Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:49 Error caddy "debug","ts":"2026-10-24T05:35:49Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:49 Warning caddy "warn","ts":"2026-10-24T05:35:49Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:35:12 Warning caddy "info","ts":"2026-10-24T05:35:12Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:35:12 Error caddy "debug","ts":"2026-10-24T05:35:12Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:35:12 Warning caddy "warn","ts":"2026-10-24T05:35:12Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:32:30 Warning caddy "info","ts":"2026-10-24T05:32:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:32:30 Error caddy "debug","ts":"2026-10-24T05:32:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:32:30 Warning caddy "warn","ts":"2026-10-24T05:32:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:31:25 Warning caddy "warn","ts":"2026-10-24T05:31:25Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:24:53 Warning caddy "info","ts":"2026-10-24T05:24:53Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:24:53 Error caddy "debug","ts":"2026-10-24T05:24:53Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:24:53 Warning caddy "warn","ts":"2026-10-24T05:24:53Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:18:08 Warning caddy "info","ts":"2026-10-24T05:18:08Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:18:08 Error caddy "debug","ts":"2026-10-24T05:18:08Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:18:08 Warning caddy "warn","ts":"2026-10-24T05:18:08Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:11:30 Warning caddy "info","ts":"2026-10-24T05:11:30Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:11:30 Error caddy "debug","ts":"2026-10-24T05:11:30Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:11:30 Warning caddy "warn","ts":"2026-10-24T05:11:30Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:24 Warning caddy "info","ts":"2026-10-24T05:03:24Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:24 Error caddy "debug","ts":"2026-10-24T05:03:24Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.conf"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","msg":"No files matching import glob pattern","pattern":"/usr/local/etc/caddy/caddy.d/*.global"}
2026-10-24T07:03:24 Warning caddy "warn","ts":"2026-10-24T05:03:24Z","logger":"admin.api","msg":"exiting; byeee!! 👋"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:03:22 Warning caddy "info","ts":"2026-10-24T05:03:22Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}
2026-10-24T07:03:22 Error caddy "debug","ts":"2026-10-24T05:03:22Z","logger":"tls","msg":"stapling OCSP","error":"no OCSP stapling for [mydomain.de *.mydomain.de]: no OCSP server specified in certificate"}
2026-10-24T07:03:22 Warning caddy "warn","ts":"2026-10-24T05:03:22Z","logger":"admin","msg":"admin endpoint on open interface; host checking disabled","address":"unix//var/run/caddy/caddy.sock|0220"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "warn","ts":"2026-10-24T05:01:41Z","logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
2026-10-24T07:01:41 Warning caddy "info","ts":"2026-10-24T05:01:41Z","logger":"pki.ca.local","msg":"root certificate trust store installation disabled; unconfigured clients may show warnings","path":"storage:pki/authorities/local/root.crt"}



Unintentionally i posted the logfile twice, sorry for that.

[Monviech (Cedrik)]

Did you create the additional domains in the Subdomains grid, and in the Handler did you select both the wildcard domain and the subdomain?

Cause it looks like the shared certificate config isn't attached to the subdomains you configured.

[Pete5]

Thanks a lot for your reply,

The caddy domain looks like this
You cannot view this attachment.

The selected certificate is not Auto HTTPS of course, the certficate "mydomain.de (ACME Client)" is selected here.
You cannot view this attachment.
You cannot view this attachment.


The caddy handler
You cannot view this attachment.

[Pete5]

Cause it looks like the shared certificate config isn't attached to the subdomains you configured.

I used HAProxy for let's encrypt and Unbound for lokal DNS before. Might it be possible that lokal DNS with Unbound is not configured correctly in conjunction with caddy?

[Pete5]

Ok, I configured the domains and handlers from scratch.
When i call up myservice.maydomain.de the page is blank but the connection seems to be secured. At least firefox shows the shield on the left of the address bar.

The caddy log says

Code Select Expand

2026-10-25T08:29:12 Error caddy "error","ts":"2026-10-25T07:29:12Z","logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"myservices","issuer":"acme-v02.api.letsencrypt.org-directory","error":"HTTP 400 urn:ietf:params:acme:error:rejectedIdentifier - Invalid identifiers requested :: Cannot issue for \"myservices\": Domain name needs at least one dot"}
But where is a dot missing?

[Monviech (Cedrik)]

The wildcard domain should be:
*.example.com

The subdomain:
myservice.example.com

The handler:
*.example.com
myservice.example.com


The subdomain must be entered fully qualified.

If theres still an issue with the caddyfile then I have to investigate.