Add layer 4 proxy module

commit 49b27383d3
Author: Renovate Bot <renovate@sh.ryuu.in>
Date:   Thu Jun 4 14:41:04 2026 +0000

    Update caddy Docker tag to v2.11.4

.gitea/workflows/build-and-push.yml

@@ -5,8 +5,8 @@ on:
   push:
     branches: [main]
     paths:
-      - 'caddy-*/**'
+      - "caddy-*/**"
-      - '.gitea/workflows/build-and-push.yml'
+      - ".gitea/workflows/build-and-push.yml"
 
 jobs:
   build:
@@ -14,29 +14,18 @@ jobs:
     strategy:
       matrix:
         variant:
-          - name: 'cloudflare'
+          - name: "cloudflare"
-            dockerfile: 'caddy-cloudflare/Dockerfile'
+            dockerfile: "caddy-cloudflare/Dockerfile"
-            context: 'caddy-cloudflare'
+            context: "caddy-cloudflare"
-          - name: 'cloudflare-crowdsec'
+          - name: "cloudflare-crowdsec"
-            dockerfile: 'caddy-cloudflare-crowdsec/Dockerfile'
+            dockerfile: "caddy-cloudflare-crowdsec/Dockerfile"
-            context: 'caddy-cloudflare-crowdsec'
+            context: "caddy-cloudflare-crowdsec"
-          - name: 'cloudflare-ddns'
-            dockerfile: 'caddy-cloudflare-ddns/Dockerfile'
-            context: 'caddy-cloudflare-ddns'
-          - name: 'cloudflare-ddns-crowdsec'
-            dockerfile: 'caddy-cloudflare-ddns-crowdsec/Dockerfile'
-            context: 'caddy-cloudflare-ddns-crowdsec'
-          - name: 'crowdsec'
-            dockerfile: 'caddy-crowdsec/Dockerfile'
-            context: 'caddy-crowdsec'
       fail-fast: true
 
     steps:
-      - 
+      - name: Checkout code
-        name: Checkout code
+        uses: actions/checkout@v6.0.3
-        uses: actions/checkout@v6.0.2
+      - name: Parse Caddy version
-      - 
-        name: Parse Caddy version
         id: version
         run: |
           VERSION=$(grep -m 1 -Eo 'caddy:[0-9]+\.[0-9]+\.[0-9]' caddy-cloudflare/Dockerfile | cut -d ':' -f2)
@@ -50,29 +39,24 @@ jobs:
           echo "major_version=$MAJOR" >> $GITHUB_OUTPUT
           echo "minor_version=$MINOR" >> $GITHUB_OUTPUT
           echo "Major: $MAJOR, Minor: $MINOR"
-      - 
+      - name: Set up QEMU
-        name: Set up QEMU
+        uses: docker/setup-qemu-action@v4.1.0
-        uses: docker/setup-qemu-action@v4.0.0
+      - name: Set up Docker Buildx
-      - 
-        name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4.1.0
         with:
           driver-opts: image=moby/buildkit:v0.23.2@sha256:ddd1ca44b21eda906e81ab14a3d467fa6c39cd73b9a39df1196210edcb8db59e
-      - 
+      - name: Login to GitHub Container Registry
-        name: Login to GitHub Container Registry
         uses: docker/login-action@v4.2.0
         with:
           registry: ghcr.io
           username: ${{ vars.GH_USERNAME }}
           password: ${{ secrets.GH_TOKEN }}
-      - 
+      - name: Login to Docker Hub
-        name: Login to Docker Hub
         uses: docker/login-action@v4.2.0
         with:
           username: ${{ vars.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - 
+      - name: Extract metadata (tags, labels) for Docker
-        name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v6.1.0
         with:
@@ -85,8 +69,7 @@ jobs:
             type=raw,value=${{ steps.version.outputs.major_version }}
             type=raw,value=${{ steps.version.outputs.minor_version }}
             type=raw,value=${{ steps.version.outputs.version }},priority=1000
-      - 
+      - name: Build and push
-        name: Build and push
         uses: docker/build-push-action@v7.2.0
         with:
           context: ${{ matrix.variant.context }}

.gitea/workflows/build-test.yml

@@ -5,8 +5,8 @@ on:
   pull_request:
     branches: [main]
     paths:
-      - 'caddy-*/**'
+      - "caddy-*/**"
-      - '.gitea/workflows/**'
+      - ".gitea/workflows/**"
 
 jobs:
   build:
@@ -14,20 +14,15 @@ jobs:
     strategy:
       matrix:
         variant:
-          - name: 'cloudflare'
+          - name: "cloudflare"
-            dockerfile: 'caddy-cloudflare/Dockerfile'
+            dockerfile: "caddy-cloudflare/Dockerfile"
-            context: 'caddy-cloudflare'
+            context: "caddy-cloudflare"
-          - name: 'crowdsec'
-            dockerfile: 'caddy-crowdsec/Dockerfile'
-            context: 'caddy-crowdsec'
       fail-fast: true
 
     steps:
-      - 
+      - name: Checkout code
-        name: Checkout code
+        uses: actions/checkout@v6.0.3
-        uses: actions/checkout@v6.0.2
+      - name: Parse Caddy version
-      - 
-        name: Parse Caddy version
         id: version
         run: |
           VERSION=$(grep -m 1 -Eo 'caddy:[0-9]+\.[0-9]+\.[0-9]' caddy-cloudflare/Dockerfile | cut -d ':' -f2)
@@ -41,16 +36,13 @@ jobs:
           echo "major_version=$MAJOR" >> $GITHUB_OUTPUT
           echo "minor_version=$MINOR" >> $GITHUB_OUTPUT
           echo "Major: $MAJOR, Minor: $MINOR"
-      - 
+      - name: Set up QEMU
-        name: Set up QEMU
+        uses: docker/setup-qemu-action@v4.1.0
-        uses: docker/setup-qemu-action@v4.0.0
+      - name: Set up Docker Buildx
-      - 
-        name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4.1.0
         with:
           driver-opts: image=moby/buildkit:v0.23.2@sha256:ddd1ca44b21eda906e81ab14a3d467fa6c39cd73b9a39df1196210edcb8db59e
-      - 
+      - name: Extract metadata (tags, labels) for Docker
-        name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v6.1.0
         with:
@@ -63,8 +55,7 @@ jobs:
             type=raw,value=${{ steps.version.outputs.major_version }}
             type=raw,value=${{ steps.version.outputs.minor_version }}
             type=raw,value=${{ steps.version.outputs.version }},priority=1000
-      - 
+      - name: Build Test
-        name: Build Test
         uses: docker/build-push-action@v7.2.0
         with:
           context: ${{ matrix.variant.context }}

caddy-cloudflare-crowdsec/Dockerfile

@@ -1,11 +1,12 @@
-FROM caddy:2.11.4-builder@sha256:08aab4980494ed7ed38d0249705d6f39b482c3373b578af7494168d19df62411 AS builder
+FROM caddy:2.11.4-builder@sha256:f2b98918658f949a3c533f2c73bd0806e3f2576ccf8eb182c8b1690c977007ea AS builder
 
 RUN xcaddy build \
     --with github.com/caddy-dns/cloudflare \
+    --with github.com/mholt/caddy-l4/modules/l4proxy \
     --with github.com/hslatman/caddy-crowdsec-bouncer/http \
     --with github.com/hslatman/caddy-crowdsec-bouncer/layer4 \
     --with github.com/hslatman/caddy-crowdsec-bouncer/appsec
 
-FROM caddy:2.11.4@sha256:533f1bff9a76426aee55fb2934636c25a2769aad8fb57f34dd39cca8cd2bab84
+FROM caddy:2.11.4@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy-cloudflare-ddns-crowdsec/Dockerfile

@@ -1,4 +1,4 @@
-FROM caddy:2.11.4-builder@sha256:08aab4980494ed7ed38d0249705d6f39b482c3373b578af7494168d19df62411 AS builder
+FROM caddy:2.11.4-builder@sha256:f2b98918658f949a3c533f2c73bd0806e3f2576ccf8eb182c8b1690c977007ea AS builder
 
 RUN xcaddy build \
     --with github.com/caddy-dns/cloudflare \
@@ -7,6 +7,6 @@ RUN xcaddy build \
     --with github.com/hslatman/caddy-crowdsec-bouncer/layer4 \
     --with github.com/hslatman/caddy-crowdsec-bouncer/appsec
 
-FROM caddy:2.11.4@sha256:533f1bff9a76426aee55fb2934636c25a2769aad8fb57f34dd39cca8cd2bab84
+FROM caddy:2.11.4@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy-cloudflare-ddns/Dockerfile

@@ -1,9 +1,9 @@
-FROM caddy:2.11.4-builder@sha256:08aab4980494ed7ed38d0249705d6f39b482c3373b578af7494168d19df62411 AS builder
+FROM caddy:2.11.4-builder@sha256:f2b98918658f949a3c533f2c73bd0806e3f2576ccf8eb182c8b1690c977007ea AS builder
 
 RUN xcaddy build \
     --with github.com/caddy-dns/cloudflare \
     --with github.com/mholt/caddy-dynamicdns
 
-FROM caddy:2.11.4@sha256:533f1bff9a76426aee55fb2934636c25a2769aad8fb57f34dd39cca8cd2bab84
+FROM caddy:2.11.4@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy-cloudflare/Dockerfile

@@ -1,8 +1,9 @@
-FROM caddy:2.11.4-builder@sha256:08aab4980494ed7ed38d0249705d6f39b482c3373b578af7494168d19df62411 AS builder
+FROM caddy:2.11.4-builder@sha256:f2b98918658f949a3c533f2c73bd0806e3f2576ccf8eb182c8b1690c977007ea AS builder
 
 RUN xcaddy build \
-    --with github.com/caddy-dns/cloudflare
+    --with github.com/caddy-dns/cloudflare \
+    --with github.com/mholt/caddy-l4/modules/l4proxy
 
-FROM caddy:2.11.4@sha256:533f1bff9a76426aee55fb2934636c25a2769aad8fb57f34dd39cca8cd2bab84
+FROM caddy:2.11.4@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy-crowdsec/Dockerfile

@@ -1,10 +1,10 @@
-FROM caddy:2.11.4-builder@sha256:08aab4980494ed7ed38d0249705d6f39b482c3373b578af7494168d19df62411 AS builder
+FROM caddy:2.11.4-builder@sha256:f2b98918658f949a3c533f2c73bd0806e3f2576ccf8eb182c8b1690c977007ea AS builder
 
 RUN xcaddy build \
     --with github.com/hslatman/caddy-crowdsec-bouncer/http \
     --with github.com/hslatman/caddy-crowdsec-bouncer/layer4 \
     --with github.com/hslatman/caddy-crowdsec-bouncer/appsec
 
-FROM caddy:2.11.4@sha256:533f1bff9a76426aee55fb2934636c25a2769aad8fb57f34dd39cca8cd2bab84
+FROM caddy:2.11.4@sha256:cb9d71ad83182011b79355cd57692686374bd78d6fe327efe0ff8507da03ab13
 
 COPY --from=builder /usr/bin/caddy /usr/bin/caddy