Hacker News Reader

I'd rather use something that can be packaged and maintained properly by distributions: https://repology.org/project/caddy/versions

I use distributions because I care about security and I'll be downvoted to oblivion for saying this.

View on HN

Yeah, if you're looking for a package, you'll want to stick to the Cloudsmith .deb since it's bound to Caddy's GitHub release workflow so guaranteed to stay up-to-date: https://cloudsmith.io/~caddy/repos/stable/packages/

P.S., from the guidelines:

> Please don't comment about the voting on comments. It never does any good, and it makes boring reading.

edit: and an official response https://news.ycombinator.com/item?id=31170881

That's correct. See https://caddyserver.com/docs/install for our recommended installation methods. Only the .deb via Cloudsmith is fully automated, every other method requires some humans to publish the release, for a variety of reasons.

Pulling packages from sources outside of your distribution is very risky for security, availability and even legal compliance.

No thanks.

Reply on news.ycombinator.com