<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Caddy · XB Field Notes</title><link>https://www.xbcatm.com/tags/caddy/</link><description>Illustrated field notes on HTTP, DNS, TLS, Caddy, SSH, releases, and recovery.</description><generator>Hugo</generator><language>en-us</language><atom:link href="https://www.xbcatm.com/tags/caddy/index.xml" rel="self" type="application/rss+xml"/><item><title>A static server should have one obvious root</title><link>https://www.xbcatm.com/notes/a-static-server-should-have-one-obvious-root/</link><pubDate>Sat, 22 Aug 2026 00:00:00 +0000</pubDate><guid>https://www.xbcatm.com/notes/a-static-server-should-have-one-obvious-root/</guid><description>Keep the Caddy file server, generated artifact, and rollback path aligned.</description></item><item><title>Certificate expiry is a date, not a dashboard color</title><link>https://www.xbcatm.com/notes/certificate-expiry-is-a-date-not-a-dashboard-color/</link><pubDate>Sat, 22 Aug 2026 00:00:00 +0000</pubDate><guid>https://www.xbcatm.com/notes/certificate-expiry-is-a-date-not-a-dashboard-color/</guid><description>Check the certificate served for the real hostname and turn the remaining days into an actionable threshold.</description></item><item><title>Compression changes the selected HTTP representation</title><link>https://www.xbcatm.com/notes/compression-changes-the-selected-http-representation/</link><pubDate>Sat, 22 Aug 2026 00:00:00 +0000</pubDate><guid>https://www.xbcatm.com/notes/compression-changes-the-selected-http-representation/</guid><description>Treat content encoding, validators, and Vary as one observable response contract.</description></item><item><title>Security headers should describe the actual page</title><link>https://www.xbcatm.com/notes/security-headers-should-describe-the-actual-page/</link><pubDate>Sat, 22 Aug 2026 00:00:00 +0000</pubDate><guid>https://www.xbcatm.com/notes/security-headers-should-describe-the-actual-page/</guid><description>A compact policy is safer when it matches the resources a static page really loads.</description></item></channel></rss>