我正在努力使用https://github.com/mholt/caddy/tree/master/dist/init/linux–systemd中规范推荐的systemd单元模板来启动Caddy。
当在类似环境下的前台开始时，这一切都起作用，下面是我已经validation的事情以及重置失败状态的结果，并开始并立即在以下日记之后：
validation：
# su -s /bin/bash -c '/usr/local/bin/caddy -log stdout -agree=true -conf=/etc/caddy/Caddyfile -root=/var/tmp' www-data有或没有tls off 。 acrobat.example.orgparsing为默认WAN适配器的唯一的IP地址，这台机器只有一个（连接）的networking适配器。 好奇的花絮：
tls off它的话，可能是因为它速度不够快，不会被systemd杀死 该杂志，caddyfile如下：
root@acrobat ~ # systemctl start caddy && journalctl -flu caddy -- Logs begin at Fri 2017-09-01 10:57:28 CEST. -- Sep 01 10:57:42 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 10:57:42 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 10:57:42 acrobat systemd[1]: caddy.service: Start request repeated too quickly. Sep 01 10:57:42 acrobat systemd[1]: Failed to start Caddy HTTP/2 web server. Sep 01 10:57:42 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 10:57:42 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:42 acrobat systemd[1]: caddy.service: Start request repeated too quickly. Sep 01 11:27:42 acrobat systemd[1]: Failed to start Caddy HTTP/2 web server. Sep 01 11:27:42 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:48 acrobat systemd[1]: Started Caddy HTTP/2 web server. Sep 01 11:27:48 acrobat caddy[5528]: Activating privacy features...2017/09/01 11:27:48 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate Sep 01 11:27:49 acrobat caddy[5528]: 2017/09/01 11:27:49 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/pDXdgOCTVhVwbbNE40l54GZLoOW0DyWjpPXbp1RpjRs Sep 01 11:27:49 acrobat caddy[5528]: 2017/09/01 11:27:49 [INFO][acrobat.example.org] acme: Trying to solve TLS-SNI-01 Sep 01 11:27:49 acrobat systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE Sep 01 11:27:49 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:49 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:49 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 11:27:49 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 11:27:49 acrobat systemd[1]: Started Caddy HTTP/2 web server. Sep 01 11:27:50 acrobat caddy[5553]: Activating privacy features...2017/09/01 11:27:50 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate Sep 01 11:27:50 acrobat caddy[5553]: 2017/09/01 11:27:50 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/OFj06UbzbqifarhRTYBgiBUNG-WJAJQ9944OBPBMHj8 Sep 01 11:27:50 acrobat caddy[5553]: 2017/09/01 11:27:50 [INFO][acrobat.example.org] acme: Trying to solve TLS-SNI-01 Sep 01 11:27:51 acrobat systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE Sep 01 11:27:51 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:51 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:51 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 11:27:51 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 11:27:51 acrobat systemd[1]: Started Caddy HTTP/2 web server. Sep 01 11:27:51 acrobat caddy[5570]: Activating privacy features...2017/09/01 11:27:51 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate Sep 01 11:27:52 acrobat caddy[5570]: 2017/09/01 11:27:52 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/GN4X6Z_zFHiZ62ElYLS9GIdC222VLhDR7EiLvLi6kzE Sep 01 11:27:52 acrobat caddy[5570]: 2017/09/01 11:27:52 [INFO][acrobat.example.org] acme: Could not find solver for: dns-01 Sep 01 11:27:52 acrobat caddy[5570]: 2017/09/01 11:27:52 [INFO][acrobat.example.org] acme: Trying to solve HTTP-01 Sep 01 11:27:52 acrobat systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE Sep 01 11:27:52 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:52 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:52 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 11:27:52 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 11:27:52 acrobat systemd[1]: Started Caddy HTTP/2 web server. Sep 01 11:27:53 acrobat caddy[5586]: Activating privacy features...2017/09/01 11:27:53 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate Sep 01 11:27:53 acrobat caddy[5586]: 2017/09/01 11:27:53 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/buW6jajSLNi207xwnLw--p8dKDbbfOCYlkCGIWHrt_0 Sep 01 11:27:53 acrobat caddy[5586]: 2017/09/01 11:27:53 [INFO][acrobat.example.org] acme: Trying to solve HTTP-01 Sep 01 11:27:53 acrobat systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE Sep 01 11:27:53 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:53 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:53 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 11:27:53 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 11:27:53 acrobat systemd[1]: Started Caddy HTTP/2 web server. Sep 01 11:27:54 acrobat caddy[5604]: Activating privacy features...2017/09/01 11:27:54 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate Sep 01 11:27:54 acrobat caddy[5604]: 2017/09/01 11:27:54 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/PfjESFfYTMncpOoMOSOy9LTL6THCZOgAo9mZRLZ1AWw Sep 01 11:27:54 acrobat caddy[5604]: 2017/09/01 11:27:54 [INFO][acrobat.example.org] acme: Trying to solve TLS-SNI-01 Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'. Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Service hold-off time over, scheduling restart. Sep 01 11:27:55 acrobat systemd[1]: Stopped Caddy HTTP/2 web server. Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Start request repeated too quickly. Sep 01 11:27:55 acrobat systemd[1]: Failed to start Caddy HTTP/2 web server. Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Unit entered failed state. Sep 01 11:27:55 acrobat systemd[1]: caddy.service: Failed with result 'exit-code'.
Caddyfile ：
root@acrobat ~ # cat /etc/caddy/Caddyfile acrobat.example.org { tls [email protected] log stdout proxy /api localhost:8080 { without /api health_check / transparent header_upstream X-Forwarded-Request-Uri {path} } proxy /ws localhost:8383 { without /ws websocket } }
为了比较起见，这里是成功的输出，在前台运行：
root@acrobat ~ # CADDYPATH=/etc/ssl/caddy su -m -s /bin/bash -c '/usr/local/bin/caddy -log stdout -agree=true -conf=/etc/caddy/Caddyfile -root=/var/tmp' www-data Activating privacy features...2017/09/01 11:37:42 [INFO][acrobat.example.org] acme: Obtaining bundled SAN certificate 2017/09/01 11:37:42 [INFO][acrobat.example.org] AuthURL: https://acme-v01.api.letsencrypt.org/acme/authz/8A1iBrjm8SS_NcIGDQophKiLNhpafnJQM5k4N-Q8feM 2017/09/01 11:37:42 [INFO][acrobat.example.org] acme: Trying to solve HTTP-01 2017/09/01 11:37:43 [INFO][acrobat.example.org] Served key authentication 2017/09/01 11:37:44 [INFO][acrobat.example.org] The server validated our request 2017/09/01 11:37:44 [INFO][acrobat.example.org] acme: Validations succeeded; requesting certificates 2017/09/01 11:37:44 [INFO] acme: Requesting issuer cert from https://acme-v01.api.letsencrypt.org/acme/issuer-cert 2017/09/01 11:37:44 [INFO][acrobat.example.org] Server responded with a certificate. 2017/09/01 11:37:44 [INFO][acrobat.example.org] Certificate written to disk: /etc/ssl/caddy/acme/acme-v01.api.letsencrypt.org/sites/acrobat.example.org/acrobat.example.org.crt done. https://acrobat.example.org 2017/09/01 11:37:44 https://acrobat.example.org http://acrobat.example.org 2017/09/01 11:37:44 http://acrobat.example.org WARNING: File descriptor limit 1024 is too low for production servers. At least 8192 is recommended. Fix with "ulimit -n 8192".