Cockpit is a web interface for managing a server. It creates it’s own self signed certificate by default. Here is how to configure cockpit behind caddy to have real certificates instead. sub-domain (https://cockpit.example.com) /etc/cockpit/cockpit.conf [WebService] Origins = https://cockpit.example.com wss:cockpit.example.com ProtocolHeader = X-Forwarded-Proto /etc/caddy/Caddyfile cockpit.example.com { reverse_proxy https://localhost:9090 { transport http { tls_...