.nh
.TH "Caddy" "8" "Oct 2026" "Auto generated by spf13/cobra" ""

.SH NAME
caddy-reverse-proxy - A quick and production-ready reverse proxy


.SH SYNOPSIS
\fBcaddy reverse-proxy [--from ] [--to ] [--change-host-header] [--insecure] [--internal-certs] [--disable-redirects] [--header-up "Field: value"] [--header-down "Field: value"] [--access-log] [--debug] [flags]\fP


.SH DESCRIPTION
A simple but production-ready reverse proxy. Useful for quick deployments,
demos, and development.

.PP
Simply shuttles HTTP(S) traffic from the --from address to the --to address.
Multiple --to addresses may be specified by repeating the flag.

.PP
Unless otherwise specified in the addresses, the --from address will be
assumed to be HTTPS if a hostname is given, and the --to address will be
assumed to be HTTP.

.PP
If the --from address has a host or IP, Caddy will attempt to serve the
proxy over HTTPS with a certificate (unless overridden by the HTTP scheme
or port).

.PP
If serving HTTPS:
  --disable-redirects can be used to avoid binding to the HTTP port.
  --internal-certs can be used to force issuance certs using the internal
    CA instead of attempting to issue a public certificate.

.PP
For proxying:
  --header-up can be used to set a request header to send to the upstream.
  --header-down can be used to set a response header to send back to the client.
  --change-host-header sets the Host header on the request to the address
    of the upstream, instead of defaulting to the incoming Host header.
	This is a shortcut for --header-up "Host: {http.reverse_proxy.upstream.hostport}".
  --insecure disables TLS verification with the upstream. WARNING: THIS
    DISABLES SECURITY BY NOT VERIFYING THE UPSTREAM'S CERTIFICATE.


.SH OPTIONS
\fB--access-log\fP[=false]
	Enable the access log

.PP
\fB-c\fP, \fB--change-host-header\fP[=false]
	Set upstream Host header to address of upstream

.PP
\fB-v\fP, \fB--debug\fP[=false]
	Enable verbose debug logs

.PP
\fB-r\fP, \fB--disable-redirects\fP[=false]
	Disable HTTP->HTTPS redirects

.PP
\fB-f\fP, \fB--from\fP="localhost"
	Address on which to receive traffic

.PP
\fB-d\fP, \fB--header-down\fP=[]
	Set a response header to send back to the client (format: "Field: value")

.PP
\fB-H\fP, \fB--header-up\fP=[]
	Set a request header to send to the upstream (format: "Field: value")

.PP
\fB-h\fP, \fB--help\fP[=false]
	help for reverse-proxy

.PP
\fB--insecure\fP[=false]
	Disable TLS verification (WARNING: DISABLES SECURITY BY NOT VERIFYING TLS CERTIFICATES!)

.PP
\fB-i\fP, \fB--internal-certs\fP[=false]
	Use internal CA for issuing certs

.PP
\fB-t\fP, \fB--to\fP=[]
	Upstream address(es) to which traffic should be sent


.SH SEE ALSO
\fBcaddy(8)\fP


.SH HISTORY
1-Oct-2026 Auto generated by spf13/cobra