A specialized tool for managing Caddy-based reverse proxy routes with wildcard subdomain support and automated HTTPS for local services.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install caddy-reverse-proxy
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install caddy-reverse-proxy using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Caddy Wildcard Reverse Proxy?
This skill provides a robust framework for managing a Caddy reverse proxy to route wildcard subdomains to local applications. By utilizing Openclaw Skills, developers can achieve seamless HTTPS across their local environment using Let's Encrypt certificates via DNS-01 challenges. It is specifically optimized for private networking through Tailscale, ensuring that your local services remain secure and inaccessible to the public internet while still benefiting from valid SSL certificates.
Built for performance and ease of use, this skill bridges the gap between local development and production-grade networking. It integrates tightly with Vercel DNS for automated certificate provisioning, allowing you to focus on building applications rather than managing complex infrastructure. This is a core component for anyone building a private local cloud powered by Openclaw Skills.
Caddy Wildcard Reverse Proxy Use Cases
- Routing multiple local development projects to unique HTTPS subdomains like myapp.your-domain.com.
- Securing internal home lab services behind a Tailscale mesh network with valid SSL.
- Automating the lifecycle of TLS certificates for services that are not publicly reachable.
- Creating a unified dashboard for local services accessible via a central reverse proxy.
- Streamlining the integration of local AI agents and gateways with secure endpoints.
How Caddy Wildcard Reverse Proxy Works
- The skill interacts with a local Caddy binary configured with the Vercel DNS plugin to handle ACME challenges.
- Users define service blocks in a centralized Caddyfile, mapping subdomains to specific localhost ports.
- Upon reloading, Caddy initiates a DNS-01 challenge via the Vercel API to verify domain ownership.
- Once verified, Let's Encrypt issues a wildcard or specific certificate stored locally.
- The reverse proxy then handles incoming HTTPS requests, terminating TLS and forwarding traffic to the designated local background service.
Caddy Wildcard Reverse Proxy Setup
To get started with this skill within the Openclaw Skills ecosystem, ensure Caddy is installed with the Vercel DNS plugin.
- Define your domain in the
Caddyfilelocated at~/.config/caddy/Caddyfile. - Add your service route:
appname.YOUR_DOMAIN {
import vercel_tls
reverse_proxy localhost:31XX
}
- Reload the configuration using the following command:
~/.local/bin/caddy reload --config ~/.config/caddy/Caddyfile --address localhost:2019
- Verify the certificate provisioning by checking the logs at
/var/log/caddy-error.log.
Caddy Wildcard Reverse Proxy Data Schema & Taxonomy
The skill manages configuration and state through several key files and metadata structures:
| Component | Path / Detail | Purpose |
|---|---|---|
| Config File | ~/.config/caddy/Caddyfile |
Primary routing and TLS definitions. |
| Logs | /var/log/caddy-error.log |
Troubleshooting and ACME challenge tracking. |
| Binary | ~/.local/bin/caddy |
The custom-built Caddy executable with DNS plugins. |
| Services | LaunchDaemon / systemd |
Ensures the proxy runs as a persistent background process. |
Caddy Wildcard Reverse Proxy Advanced Features
- Support for DNS-01 ACME challenges, allowing SSL for non-public internal IPs.
- Native compatibility with Tailscale for zero-config private networking.
- Integration with the dev-serve companion skill for one-command proxy provisioning.
- Pre-configured templates for OpenClaw Gateway integration.
- Support for custom TLS snippets to swap DNS providers (e.g., Cloudflare, Route53).
- Automated background service management via macOS LaunchDaemons or Linux systemd.
SKILL.md
Loading
Related Openclaw Skills
Amazon Automation
A browser automation skill for purchasing, reordering, and processing returns on Amazon using an AI agent.
Amazon Ordering
Automate the entire Amazon shopping lifecycle, from reordering essentials to processing returns, using browser-based AI agents.
Self-Reflection AI Agent Skill
A recursive optimization skill that enables AI agents to analyze their own performance and update their knowledge base automatically.
Clabcraw AI Gaming Agent
An automated gaming skill that allows AI agents to compete in 1v1 high-stakes matches for USDC rewards.
Git Commit & Push Automator
Automatically stage changes, generate AI-driven commit messages, and push code to your remote repository in one seamless workflow.
Cron Job Setup
A professional framework for creating and managing reliable, scheduled AI tasks and periodic workflows within OpenClaw.
Featured*
