2025-09-26, 08:32 PM
Hello, can someone help me with this reverse proxy through caddy?
With the help of Microsoft Copilot, I was able to have my computer:
Jellyfin is running locally and working. (Docker Compose yml file)
Caddy is installed natively (not in Docker) and configured to reverse proxy Jellyfin.
DuckDNS domain (subdomain.duckdns.org) is set up and pointing to your public IP.
Docker Compose was used initially but is no longer needed for Caddy.
UFW firewall is now active and allows ports 80 and 443.
However:
Caddy is trying to get a TLS certificate from Let’s Encrypt.
Let’s Encrypt uses port 443 to verify your domain.
Port 443 is not open to the outside world — this is the blocker.
What I’ve Already Done
Verified DuckDNS is resolving correctly.
Set up port forwarding in your Netgear router for ports 80 and 443.
Enabled UFW and allowed those ports.
Restarted Caddy and checked logs — it’s attempting the TLS challenge.
Does anyone have any ideas? I don't think it would be smart to say what ISP I am using. But I am using a Netgear Mesh router with 1 satellite, and have port forwarding rules for 80 to 80 with my host IP as well as 443. I read online my ISP does not block using ports. I am using their fiber modem.
I am at a loss.
Let me know if there is any more information I can provide.
With the help of Microsoft Copilot, I was able to have my computer:
Jellyfin is running locally and working. (Docker Compose yml file)
Caddy is installed natively (not in Docker) and configured to reverse proxy Jellyfin.
DuckDNS domain (subdomain.duckdns.org) is set up and pointing to your public IP.
Docker Compose was used initially but is no longer needed for Caddy.
UFW firewall is now active and allows ports 80 and 443.
However:
Caddy is trying to get a TLS certificate from Let’s Encrypt.
Let’s Encrypt uses port 443 to verify your domain.
Port 443 is not open to the outside world — this is the blocker.
What I’ve Already Done
Verified DuckDNS is resolving correctly.
Set up port forwarding in your Netgear router for ports 80 and 443.
Enabled UFW and allowed those ports.
Restarted Caddy and checked logs — it’s attempting the TLS challenge.
Does anyone have any ideas? I don't think it would be smart to say what ISP I am using. But I am using a Netgear Mesh router with 1 satellite, and have port forwarding rules for 80 to 80 with my host IP as well as 443. I read online my ISP does not block using ports. I am using their fiber modem.
I am at a loss.
Let me know if there is any more information I can provide.