u/pxxbn

Private HTTPS Resources with custom SNI and Host Header

Hi everyone,

I’m setting up private HTTPS resources using pangolin. Traffic is routed through newt container to my caddy container.

My Caddy instance currently only listens on TLS port 443 and uses virtual hosts, so it relies on correct SNI + Host header matching to route traffic properly.

For public resources, I can set the SNI and host header, but this seems to be missing for private HTTPS Resources?

Is it possible to explicitly set or override SNI and/or the Host header for private HTTPS resources in a similar way?

I got the setup working if I use HTTP Pangolin/Newt to Caddy, though with this setup I would need to maintain two vHosts per site (one for https traffic not coming from pangolin and one for http). Is there something I'm currently overlooking?

Thanks for your input and advice!

reddit.com
u/pxxbn — 4 days ago