summaryrefslogtreecommitdiff
path: root/docs/installation_guide/caddy.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/installation_guide/caddy.md')
-rw-r--r--docs/installation_guide/caddy.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/installation_guide/caddy.md b/docs/installation_guide/caddy.md
index 89fb55605..935b811fd 100644
--- a/docs/installation_guide/caddy.md
+++ b/docs/installation_guide/caddy.md
@@ -49,6 +49,8 @@ In your GoToSocial config turn off Lets Encrypt by setting `letsencrypt-enabled`
If you we running GoToSocial on port 443, change the `port` value back to the default `8080`.
+If the reverse proxy will be running on the same machine, set the `bind-address` to `"localhost"` so that the GoToSocial server is only accessible via loopback. Otherwise it may be possible to bypass your proxy by connecting to GoToSocial directly, which might be undesirable.
+
## Set up Caddy
We will configure Caddy 2 to use GoToSocial on our main domain example.org. Since Caddy takes care of obtaining the Lets Encrypt certificate, we only need to configure it properly once.