Deemo

Silly question how safe are caddy plugins? (especially dns challenge modules like cloudflare, duckdns, etc).

https://github.com/caddy-dns https://github.com/caddy-dns/cloudflare/tree/master

Not sure if those plugins are covered by caddy's security disclosure policy

https://github.com/caddyserver/caddy/security

Certbot’s Nginx integration etc

How do you obtain ssl certs then?

Do you manually update the config every 3 months?

I've only really use caddy and my only experience with ngnix is ngnix proxy manager (which isn't really true ngnix).

I wasn't sure if hot swapping certs (even with same name was possible, kinda thought you would to reload it upon cert change).

Also regarding cert bot I have only used it in manual mode so it's managed mode is a bit foreign.