We want to install Caddy with Webi and run setcap so it can serve on system ports 80 and 443 without being root.
Install Caddy with Webi.
curl https://webinstall.dev/caddy | bash
The path to Caddy as provided by Webi is a symlink.
echo $(which caddy)
We can follow that through to the path of the actual binary.
echo $(readlink -f $(which caddy))
Then we can run setcap while providing it the path to the actual binary.
sudo setcap 'cap_net_bind_service=+ep' $(readlink -f $(which caddy))