Shellinabox reverse proxy and basic auth with Caddy

shellinabox.md

Install shellinabox

sudo apt-get install shellinabox -y
# Modify the shellinabox settings
# - lock down so only localhost allowed
# - disable ssl as we will use the verified certs provided by Caddy
sudo nano /etc/default/shellinabox
...
SHELLINABOX_ARGS="--no-beep --localhost-only --disable-ssl"
...
# enable the service and restart it
sudo systemctl enable shellinabox.service
sudo service shellinabox restart

Now create a Caddyfile to proxy it

# file: /data/caddy/Caddyfile
my.domain.tld {
    basicauth /shell <username> <password>
    proxy /shell 127.0.0.1:4200
    rewrite /shell /shell/

    tls [email protected]
    log
    errors errors.log
}