RU RU

All Posts

SSL certificates via DNS: automating Let’s Encrypt issuance

2025-10-06

SSL certificates via DNS: automating Let’s Encrypt issuance

Introduction

Let’s Encrypt is the standard for obtaining free TLS certificates. Most often certificates are issued via the HTTP-01 method, which requires a reachable web server on port 80. However, for internal services or wildcard certificates (for example, *.example.com) it is more convenient to use DNS-01, which verifies domain ownership via TXT records in DNS and does not require open ports.

This article covers:

102 | Caddy vs. Traefik vs. HAProxy vs. Nginx vs. Apache: Comparing Web Servers and Proxies

2025-09-06

Caddy vs. Traefik vs. HAProxy vs. Nginx vs. Apache

Introduction

Choosing a web server and reverse proxy today depends on tasks and infrastructure. Caddy, Traefik, HAProxy, Nginx, and Apache are five popular solutions, each with its strengths and weaknesses.

In this article, we’ll compare them by key criteria: philosophy, installation, SSL, CI/CD, and complexity.


Comparison by Key Criteria

CriterionCaddyTraefikHAProxyNginxApache
PhilosophySimplicity, automatic SSLDynamic routing and Service DiscoveryHigh-performance load balancerUniversal web server and proxyClassic web server, static approach
InstallationSingle binaryContainer, requires setupSingle binary, manual configurationOS package, easy installationOS package, easy installation
SSL AutomationBuilt-in, main advantageBuilt-in, part of ecosystemNo (requires external integration, e.g., certbot)Partial (via certbot or modules)Partial (via certbot or modules)
CI/CDVery easy integrationIdeal for microservicesUsed for high-load balancingRequires manual steps, integration possibleRequires manual steps, integration possible
ComplexityLow, beginner-friendlyMedium/high, requires orchestrator knowledgeMedium, more complex configsMedium, rich ecosystemMedium, often bloated configs
PerformanceGood, but not top-tierGoodExcellent, optimized for load balancingExcellentAverage
Best Use CaseLocal development, quick MVPsDocker/Kubernetes, microservicesHigh-load systems, load balancingUniversal choice for web and proxyStatic site hosting, legacy systems

Who Is It For?

🔹 Caddy

Ideal for:

101 | Traefik: A Dynamic Router for the Container Era

2025-09-05

Traefik: A Dynamic Router for the Container Era

Introduction

Unlike Caddy, which focuses on simplicity, Traefik (pronounced Traffic) was built to solve one specific task: routing traffic in dynamic environments.

It is a reverse proxy and load balancer designed specifically for Docker, Kubernetes, and other orchestrators. The main difference from Nginx is not static configuration, but the ability to automatically discover and serve services.


Key Concepts: Dynamic Configuration

The philosophy of Traefik is built on the principle of Service Discovery.

072 | Dokploy: Your Own Heroku on Docker – Full Control and Flexibility

2025-08-03


Introduction to Dokploy: Manage Docker Apps on Your Terms

In previous articles, we explored powerful SaaS deployment platforms like Vercel and Netlify, which offer simplicity and speed by letting a third party manage your infrastructure. Now it’s time to dive into the world of self-hosted solutions with Dokploy. Dokploy is more than just a control panel—it’s your personal “Heroku” that you install on your own server. It’s designed to simplify deploying and managing Docker containers while giving you full control over your environment, without subscription fees for every little thing.

Dokploy: Simple Management of Docker Applications on Your Server

2025-07-29

In the world of self-hosted solutions for application management, Dokploy is a modern and powerful platform designed to significantly simplify the deployment and management of Docker containers on your own server. Forget about the complexities of manually configuring Docker Compose, Nginx, or Traefik—Dokploy offers an intuitive web interface that makes this process accessible even to those just starting their journey into containerization. It’s the perfect solution for developers and teams seeking full control over their infrastructure without unnecessary hassle.