Caddy

A web server and reverse proxy written in Go that manages TLS certificates itself, obtaining and renewing them from public authorities or its own internal authority and redirecting plain HTTP automatically. The Caddyfile format stays short and readable, while JSON config and a runtime API allow programmatic setups, and the same process serves static files, proxies to app servers and balances traffic.

It suits small teams and homelab operators who want a working HTTPS site in minutes rather than hand-maintained certificate jobs.

Hosting it on your own machine keeps TLS keys and traffic metadata under your control; certificate renewals are free and the configuration is a plain file you can roll back.