Project forked and simplified from https://github.com/IAreKyleW00t/docker-caddy-cloudflare

The official Caddy Docker image with the added caddy-dns/cloudflare module for DNS-01 ACME validation support. This image does not change anything with Caddy except replacing the caddy binary. Built for all supported platforms!

# Docker Hub
docker pull yqs112358/caddy-cloudflare:latest

# GHCR
docker pull ghcr.io/yqs112358/caddy-cloudflare:latest

The following tags are available for the yqs112358/caddy-cloudflare image.

• latest

Since this is built off the official Docker image all of the same Volumes, Environment variables, etc. can be used with this container. Please refer to the official Caddy Docker image and docs for more information on using Caddy.

Simply create the container as usual and include your CF_API_TOKEN (email no longer required for API Tokens). We can utilizing Caddy's support for Environment varaiables to pass these values into our Caddyfile.

docker run --rm -it \
  --name caddy \
  -p 80:80 \
  -p 443:443 \
  -v caddy_data:/data \
  -v caddy_config:/config \
  -v $PWD/Caddyfile:/etc/caddy/Caddyfile \
  -e CF_API_TOKEN=UhKLc...JD9jk \
  yqs112358/caddy-cloudflare:latest

Then set the global acme_dns directive in your Caddyfile

tls {
    dns cloudflare {env.CF_API_TOKEN}
}

or via JSON

{
  "module": "acme",
  "challenges": {
    "dns": {
      "provider": {
        "name": "cloudflare",
        "api_token": "{env.CF_API_TOKEN}"
      }
    }
  }
}

See the caddy-dns/cloudflare module and tls directive for advanced usage.

You can generate a Cloudflare API token via the Cloudflare web console using the following steps:

1. Login to your Dashboard
2. Go to Account Profile > API Tokens
3. Click "Create token" (Use the "Create Custom Token" option)
4. Grant the following permissions:
   • Zone > Zone > Read
   • Zone > DNS > Edit

You can easily build the Docker image locally by doing

docker build -t caddy-cloudflare .

Feel free to contribute and make things better by opening an Issue or Pull Request at the parent project.

See LICENSE.