netdata_netdata/docs/netdata-agent/configuration/running-the-netdata-agent-behind-a-reverse-proxy/Running-behind-caddy.md

Running Netdata behind Caddy

To run Netdata via Caddy v2 reverse proxy, set your Caddyfile up like this:

netdata.domain.tld {
    reverse_proxy localhost:19999
}

Other directives can be added between the curly brackets as needed.

To run Netdata in a subfolder:

netdata.domain.tld {
    handle_path /netdata/* {
        reverse_proxy localhost:19999
    }
}

limit direct access to Netdata

You would also need to instruct Netdata to listen only to 127.0.0.1 or ::1.

To limit access to Netdata only from localhost, set bind socket to IP = 127.0.0.1 or bind socket to IP = ::1 in /etc/netdata/netdata.conf.