"Surprise, surprise, surprise!" (Do you know which classic TV character that quote is from?) We've made a lot of progress on new features since v2.3, and all the major work slated for v2.4 is already done! This is a preview release.

This is a preview release. There's still some fine-tuning we need to do which is delaying the release candidates, but I wanted to roll out some of the exciting improvements early so you can start testing them. As far as I can tell, this tag is relatively stable. However, please expect bugs; though I bet most of them will be minor or limited to edge cases.

Documentation will be updated in the coming weeks. Until then, please refer to individual commits/issues (below) and the code base directly (it is easy to search and read) for docs. We're happy to help on our forums too.

For highlights, see release notes for v2.4.0 stable.

Many other things have been added, changed, or improved as well. See all the commits for details.

Please give this a try in low-risk environments as soon as you can, and we'll be able to ship a better v2.4 stable!

Changelog

bf50d701 acmeserver: Support custom CAs from Caddyfile ab80ff4f admin: Identity management, remote admin, config loaders (#3994) 3366384d caddycmd: Add upgrade command (#3972) c8557dc0 caddyfile: Introduce basic linting and fmt check (#3923) f0216967 caddyfile: Refactor unmarshaling of module tokens 8ec90f1c caddyhttp: Check for invalid subdirectives of static_response bef80cd8 caddyhttp: Fix redir html status code, improve flow (#3987) e2c5c285 caddyhttp: Implement handler abort; new 'abort' directive (close #3871) (#3983) cc63c580 caddyhttp: Support placeholders in header matcher values (close #3916) 160d1999 caddytest: Update Caddyfile tests for formatting, HTTP-only blocks 09432ba6 caddytls: Configurable OCSP stapling; global option (closes #3714) 51e3fdba caddytls: Save email with account if not already specified 8b6fdc04 caddytls: add 'key_type' subdirective (#3956) 2772ede4 cmd: Add --force flag to reload command (close #4005) ed678235 cmd: Clean up build-info and upgrade output 59071ea1 cmd: Implement sd_notify() to notify systemd about readiness (#3963) 144b65cf cmd: Organize list-modules output; --packages flag (#3925) 8f6f9865 cmd: Print more detailed version with --environ b1bec8c8 go.mod: Update CertMagic and acmez (improved IDN support) 8c291298 httpcaddyfile: Add resolvers subdir of tls (close #4008) 7846bc1e httpcaddyfile: Adjust iterator when removing AP (fix #3953) 653a0d3f httpcaddyfile: Fix automation policies 90284e80 httpcaddyfile: Fix default issuers when email provided d68cff8e httpcaddyfile: Skip TLS APs for HTTP-only hosts (fix #3977) 55e49ff5 httpcaddyfile: Sort catch-all site blocks properly (fix #4003) c2b91dbd httpcaddyfile: Support repeated use of cert_issuer global option c9861106 httpcaddyfile: Warn if site address uses unspecified IP (close #4004) ef544832 logging: Remove logfmt encoder (close #3575) 58e83a81 map: Add missing json struct tag 3c9256a1 reverseproxy: Caddyfile health check headers, host header support (#3948) 5ef76ff3 reverseproxy: Response buffering & configurable buffer size 88a38bd0 rewrite: Use RawPath instead of Path (fix #3596) (#3918) 14f50d9d templates: Add fileExists and httpError template actions