notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
After the ports freeze to fix some stuff, the freeze is over. I have some work to do before FreshPorts can start processing commits again before it can start processing again. I've created an issue for that.
Port details on branch 2026Q2
caddy Fast, highly configurable HTTP/1-2-3 web server with automatic TLS
2.11.4 www on this many watch lists=0 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 2.11.4_3Version of this port present on the latest quarterly branch.
Maintainer: adamw@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-04-10 17:07:00
Last Update: 2026-06-13 22:42:07
Commit Hash: d0ec8d7
License: APACHE20
WWW:
https://caddyserver.com
Description:
Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go. Features: - Easy configuration with the Caddyfile - Powerful configuration with JSON config - Dynamic configuration with a JSON API - Config adapters if you don't like JSON - Automatic HTTPS by default - ACME (Let's Encrypt) for public sites - Fully-managed local CA for internal names and IPs - Can coordinate with other Caddy instances in a cluster - HTTP/1.1, HTTP/2, and HTTP/3 support - Actually fun to use
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (5 items)
Collapse this list.
  1. bin/caddy
  2. @sample etc/caddy/Caddyfile.sample
  3. /usr/local/share/licenses/caddy-2.11.4/catalog.mk
  4. /usr/local/share/licenses/caddy-2.11.4/LICENSE
  5. /usr/local/share/licenses/caddy-2.11.4/APACHE20
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • caddy
Dependency lines:
  • caddy>0:www/caddy
Conflicts:
CONFLICTS_INSTALL:
  • caddy-custom
To install the port:
cd /usr/ports/www/caddy/ && make install clean
To add the package, run one of these commands:
  • pkg install www/caddy
  • pkg install caddy
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: caddy
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1781388840 SHA256 (go/www_caddy/caddy-v2.11.4/v2.11.4.mod) = 2ce7537aecbdaf5b2fe42bf0cc42f2d7e7ce5e4186aab3586b736a53f5937abd SIZE (go/www_caddy/caddy-v2.11.4/v2.11.4.mod) = 8465

Expand this list (2 items)

Collapse this list.

SHA256 (go/www_caddy/caddy-v2.11.4/v2.11.4.zip) = 110eea53c3005d327a092d83fc67ae2a270a08c4a001e52bb2a439a163a872e8 SIZE (go/www_caddy/caddy-v2.11.4/v2.11.4.zip) = 1234977

Collapse this list.

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go125 : lang/go125
Fetch dependencies:
  1. go125 : lang/go125
There are no ports dependent upon this port
Configuration Options:
No options to configure
Options name:
www_caddy
USES:
cpe go:1.25+,modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/caddyserver/caddy/v2/@v/
Collapse this list.

Number of commits found: 5

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.11.4
13 Jun 2026 22:42:07
commit hash: d0ec8d7b3aac2039ab865b1fcec31f05aebaced0commit hash: d0ec8d7b3aac2039ab865b1fcec31f05aebaced0commit hash: d0ec8d7b3aac2039ab865b1fcec31f05aebaced0commit hash: d0ec8d7b3aac2039ab865b1fcec31f05aebaced0 files touched by this commit		 Adam Weinberger (adamw) search for other commits by this committer 
www/caddy: Update to 2.11.4 (security)

Changes:
  Security-related patches:
  - caddyhttp: Normalize Windows backslashes in path matcher (thanks
    @Vincent550102)
  - rewrite: Prevent placeholder re-expansion in injected query
    (thanks @WhiskerEnt)
  - templates: Improved stripHTML action to more reliably remove
    malformed HTML (thanks to @jmrcsnchz)
  - caddyhttp: Ignore header fields with underscores to prevent
    collisions (thanks @Vincent550102 for the report and @dunglas for
    the patch)

    NB: These security patches may be breaking if your application
(Only the first 15 lines of the commit message are shown above View all of this commit message)
2.11.3_1
03 Jun 2026 18:00:48
commit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239c files touched by this commit This port version is marked as vulnerable.		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.11 / go-1.26.4
2.11.3
13 May 2026 02:26:00
commit hash: d8c3ef3d320f148b967a20e210d6bde9bf1f20a9commit hash: d8c3ef3d320f148b967a20e210d6bde9bf1f20a9commit hash: d8c3ef3d320f148b967a20e210d6bde9bf1f20a9commit hash: d8c3ef3d320f148b967a20e210d6bde9bf1f20a9 files touched by this commit This port version is marked as vulnerable.		 Adam Weinberger (adamw) search for other commits by this committer 
www/caddy: Update to 2.11.3

This contains security fixes. See the link below for details.

Changes: https://github.com/caddyserver/caddy/releases/tag/v2.11.3
(cherry picked from commit 0a696546ee9801da4afe88f9625c753644e37d7a)
2.11.2_2
09 May 2026 17:30:33
commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654 files touched by this commit This port version is marked as vulnerable.		 Adam Weinberger (adamw) search for other commits by this committer 
various: Bump ports for Go 1.25.10
2.11.2_1
10 Apr 2026 16:19:03
commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305 files touched by this commit This port version is marked as vulnerable.		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.9 / 1.26.2

Number of commits found: 5
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
mariadb1011-serverAug 25
mariadb114-serverAug 25
mariadb118-serverAug 25
mariadb123-serverAug 25
opensslAug 25
openssl34Aug 25
openssl35Aug 25
openssl36Aug 25
openssl40Aug 25
mod_gnutlsAug 24
jackson-coreAug 23
jackson-databindAug 23
traefikAug 23
tailscaleAug 21
terraformAug 21

26 vulnerabilities affecting 408 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-08-25 18:20:39 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 35094
Broken 78
Deprecated 323
Ignore 192
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 43
Expired 18
Set to expire 248
Interactive 0
new 24 hours 7
new 48 hours18
new 7 days58
new fortnight104
new month202
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.