From 18c669974a8f4431271f4a0c371b4e9850a28a8b Mon Sep 17 00:00:00 2001
From: DoTheEvo <dotheevo@gmail.com>
Date: Tue, 26 May 2026 23:04:17 +0200
Subject: [PATCH] update

---
 caddy_v2/readme.md | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/caddy_v2/readme.md b/caddy_v2/readme.md
index 78439c8..2ce2726 100644
--- a/caddy_v2/readme.md
+++ b/caddy_v2/readme.md
@@ -410,6 +410,28 @@ whatever.{$MY_DOMAIN} {
 }
 ```
 
+**Warning:**<br>
+Since version 2.11 (2026-feb) there has been
+a [change](https://github.com/caddyserver/caddy/pull/7454)
+in the default way Caddy forwards the `Host` header for HTTPS upstreams.<br>
+Caddy now sets the Host header to {upstream_hostport} - *server-blue:443*
+instead of preserving the original requested hostname - *whatever.example.com*.
+This can break shit.
+
+Fix - explicitly set the Host header.
+
+```
+whatever.{$MY_DOMAIN} {
+    reverse_proxy https://server-blue:443 {
+        header_up Host {host}
+        transport http {
+            tls
+            tls_insecure_skip_verify
+        }
+    }
+}
+```
+
 ### Named matchers and IP filtering
 
 Caddy has [matchers](https://caddyserver.com/docs/caddyfile/matchers)<br>