Caddy service

naguam

Hello,

I am trying to run caddy on a netbsd server, to host a static website (I am interested in the auto_tls feature; yes I could have installed nginx and certbot, which already have an init script, but... why not learning new things).

However pkgin install caddy only installs the caddy binary in /usr/pkg/bin/caddy.
Thus, I am thinking fine, let's learn more about netbsd rc services and write one.

So I am trying to learn from other existing ones such as apache, nginx, httpd (bozo) and lighthttpd, but I am still a bit lost, notably with the rc.subr things.

I created a system user for caddy (and group) and I am willing to run it as the user caddy in a chroot.
I managed to create the chroot manually and run my service with

chroot -u caddy -g caddy /var/caddy /usr/bin/caddy start --config /etc/caddy/Caddyfile --pidfile /var/run/caddy.pid

And my reload command works in a similar fashion.

As caddy is a user, I managed to do the port forwarding properly with npf to listen publicly on standard ports.
I think having the pid file in the chroot dir is not a problem as long as the service is aware of it.

However, my posix shell scripting skills are a bit rusty and I've never done in the context of the rc init with all the predefined things, which makes it a bit confusing to me.

If someone is happy to guide me, thanks in advance 🙂 .

(I already have most of the mans for rc.conf and rc.subdr open)

Here is what I currently have (not working because not finished)

#!/bin/sh

# PROVIDE: caddy
# REQUIRE: DAEMON
# KEYWORD: shutdown

$_rc_subr_loaded . /etc/rc.subr

name="caddy"
rcvar=$name
command="/usr/pkg/bin/${name}"
caddy_user="caddy"
caddy_group="caddy"
caddy_chroot="/var/caddy"
pidfile="/var/run/caddy.pid"
required_files="/etc/caddy/Caddyfile"

load_rc_config $name

#caddy_user=${caddy_user:+-U \'$caddy_user\'}
#command_args="$httpd_wwwuser_arg -b '$httpd_wwwdir'"
#required_dirs="$httpd_wwwdir"

run_rc_command "$1"

Which is super basic.

I could just write an ugly random script not taking care of rc.subdr and pre-definitions but I'd like to learn to do the thing the proper way.

Most of my knowledge comes from the Linux world (mostly systemd but I wrote an alpine linux openrc init script once) and I am trying to translate what I can. I

I'd like to learn the thinking behind the design of such init scripts.

naguam

Just edited the question because I managed to solve some problems I had, The only last thing I am trying to sort out is actually writting the rc init script, because I managed to run my app with the chroot command above.

naguam

Actually now I am struggling because the caddy challenge server tries to spawn on port 443 despite their documentation telling this should folloz https_port as long as entrypoint is 443 (I tested with nc and caddy in http only, both 80 and 443 are forwarded to 8000 and 4443)

Found a solution with the version of caddy in 2024Q2 not yet in pkgin latest branch

naguam

Not sure it is the best way to do it, but that works

#!/bin/sh
#
# $NetBSD: caddy ,v 1.1 2024/07/07 19:47:00 naguam Exp $
#

# PROVIDE: caddy
# REQUIRE: DAEMON
# KEYWORD: shutdown

$_rc_subr_loaded . /etc/rc.subr

name="caddy"
rcvar=$name
command="/usr/bin/${name}"
caddy_user="caddy"
caddy_group="caddy"
caddy_chroot="/var/${name}"
caddy_env="HOME=/caddy"
chpid="/var/run/${name}.pid"
pidfile="${caddy_chroot}${chpid}"
cfg="/etc/caddy/Caddyfile"
required_files="${caddy_chroot}${cfg}"
required_dir="${caddy_chroot}"
command_args="start --config ${cfg} --pidfile ${chpid}"
extra_commands="reload"

load_rc_config $name

run_rc_command "$1"

Problem solved

rvp

naguam Problem solved

Great. I was going to suggest you look at /etc/rc.d/tor (if installed).

(And, try not to set your own posts "Best Answer"; that's like awarding yourself 1st prize. Others should do it. 😃)

naguam

rvp

Well, I thought that generally it is the opposite : OP selects the best answer (also known as "solution" on other forum engines) to indicate the problem is solved and let others know that, without having to go through the thread.

To me it makes no sense that other people than the OP can decide who answered him the best.

Actually in the past, with old forum engines it was OP who used to edit the (his) first post (allowing also to edit the title), to add [SOLVED], for the same reason, to indicate that his problem is solved without having to open the actual thread that no more help is needed.

It's not my fault if nobody answered/helped me before I figured it out.

And I did not select that just to award myself at all, and wouldn't have asked if I wasn't actually stuck in the first place.

rvp

naguam Yeah, not being able to change the title is pain, I'm afraid, but, if you just want to indicate that your issue has been solved, then simply edit the 1st post (or whichever) and say that, followed by a link to the post which fixed it. Tagging Best Answer is to show your appreciation for other people's efforts. Otherwise, it's just (unintentionally) funny. (And, you're not the only one who's done something like this. I know another user here who routinely likes and thumbs-ups his own posts. That's hilarious too.)

Jay

naguam well only OP allowed to choose best answer logic makes sense otherwise multiple people will choose different answers for same thread. And Mods/admin are allowed to select best answer for OP of OP don't select one. 🙂

kc9udx

Jay that's the best answer😁