We want to install Caddy with Webi and run setcap so it can serve on system ports 80 and 443 without being root.

Install Caddy with Webi.

curl https://webinstall.dev/caddy | bash

The path to Caddy as provided by Webi is a symlink.

echo $(which caddy)

We can follow that through to the path of the actual binary.

echo $(readlink -f $(which caddy))

Then we can run setcap while providing it the path to the actual binary.

sudo setcap 'cap_net_bind_service=+ep' $(readlink -f $(which caddy))