Caddy + Cloudflare SSL on Proxmox — HTTPS for Everything (2026)

Set up Caddy as a reverse proxy on Proxmox with automatic HTTPS via Cloudflare DNS-01 challenges — no ports exposed to the internet. We build a custom Caddy binary with the Cloudflare DNS module using xcaddy, manage the binary properly with dpkg-divert, and proxy four services with valid Let's Encrypt certificates. Full written guide with screenshots: https://www.localhake.com/content/caddy-cloudflare-ssl-proxmox Recommended Gear Some links are affiliate links — I may earn a commission at no extra cost to you. GMKtec EVO X2 (AI MAX+ 395, 128GB): https://amzn.to/4rJsga0 Minisforum MS-01: https://amzn.to/4uIXRLB GMKtec K12 Mini PC (Ryzen 7, 32GB): https://amzn.to/4rOjF5L Samsung 990 Pro 2TB NVMe SSD: https://amzn.to/4dwrhq7 Crucial P3 Plus 4TB NVMe SSD: https://amzn.to/40Nsimf SanDisk Ultra 64GB USB Drive (2-Pack): https://amzn.to/4bnItNh Sabrent M.2 NVMe/SATA Enclosure: https://amzn.to/4bUtTNo Chapters 0:00 Intro 1:11 Create the Container 4:04 Install Go and xcaddy 5:40 Build Caddy with Cloudflare Module 6:24 Install Caddy Package and Replace Binary 8:29 Create Cloudflare API Token 9:35 Configure Token in Systemd 10:36 Write the Caddyfile 13:35 Add Pi-hole DNS Records 14:53 Start Caddy and Test 16:12 Adding a New Service 16:35 Reduce Container RAM 17:22 Add Uptime Kuma Monitors 18:34 Add to PBS Backup 19:14 Wrap-Up #caddy #proxmox #homelab #https #reverseproxy