I’m wondering if https://www.digitalocean.com/community/questions/letsecrypt-failure is relevant. Did you try removing tls to see if Caddy works?

You can also use systemctl status caddy.service -l to see if there are some useful logs.

Thanks for the response!

lets encrypt is now up and running

I tried removing one by one
1) tls
2) gzip
3) empty file

caddy is working perfectly fine only when the Caddyfile is empty

I am still not sure what is wrong in this configuration

portexcel.com {
root /home/admin/web/portexcel.com/public_html
gzip
tls nc@tharlines.com
}

When I am using command line like
caddy -host portexcel.com

I am getting this error
2017/05/20 16:26:16 failed to get certificate: [portexcel.com] error presenting token: Could not start HTTP server for challenge -> listen tcp :80: bind: address already in use

How to fix this?

BTW my httpd is consuming too much of memory like 70% of 1GB RAM

None of these are working

portexcel.com{

bind 139.58.69.238
proxy / [::1]:8081 { transparent }
tls
{ max_certs 100 }
}

OR

portexcel.com{

bind 139.58.69.238
proxy / [::1]:8081 { transparent }
}

OR

portexcel.com{

bind 139.58.69.238
proxy / [::1]:8080 { transparent }
tls
{ max_certs 100 }
}

OR

portexcel.com{

bind 139.58.69.238
proxy / [::1]:8080 { transparent }
}

@vinitjain75

I rand through the guide on a test 512MB Droplet to see if I could reproduce the issue and I didn’t run in to any issues when using the defaults from the guide.

I then created a test directory much like yours:

/home/domain.com/htdocs/public

Opened up Caddyfile and made the changes:

domain.com {
    gzip
    root /home/domain.com/htdocs/public

    tls me@domain.com
}

Restarted caddy using:

systemctl restart caddy

It then failed and the reason it does is because of the service file configuration – specifically this line:

ProtectHome=true

Above that line, you’ll see:

; Hide /home, /root, and /run/user. Nobody will steal your SSH-keys.

What this does is hides /home – and with it set as true, you won’t be able to use /home as a root for your site – or any directory below it – as it prevents its use.

To remedy this, you need to either comment that line out with a ; so it looks like:

; ProtectHome=true

or define ProtectHome=read-only (this is implied if you don’t define it, so commenting that line out is really all you need to do). Once that change has been made, you’ll want to reload using:

systemctl daemon-reload

and then finally:

systemctl start caddy

or

systemctl restart caddy

…

Once that change was made, I was able to get 5 other domains working from /home without any issues.

@jtittle

Based on your input, I have tried using this - but it did not work on 2 different droplets and domains
; ProtectHome=true

I have setup my website using Vesta Control Panel and this is why my website are under /home/admin/web/sitename.com/public_html

After following all the steps, now my Vesta CP login page is also not opening
https://139.59.58.199:8083/login/

Please help for both issues

@jtittle
Yes Vesta CP uses NGINX and this is why I think caddy says port 80 already in use

can I uninstall vesta cp and nginx or will I have to start afresh?

I am planning multi server with a Load balancer (LB) model - Just wanted to first make it work on a single server and then wanted to replicate with one LB, one DB Server and atleast 2 Clients Server

Thereafter increase Client Servers with volume

@jtittle

sounds complicated to me

Anyway you can help set this up for us or we can be your client in someway :-)