services:
  caddy:
    # build:
    #   context: .
    #   dockerfile: Dockerfile
    image: git.housh.dev/homelab/caddy-rogue-mini:latest
    container_name: caddy
    restart: unless-stopped
    env_file:
      - .env
    environment:
      - CLOUDFLARE_EMAIL=${CF_EMAIL}
      - CLOUDFLARE_API_TOKEN=${CF_AUTH_TOKEN}
      - ACME_AGREE=true
    ports:
      - 80:80
      - 443:443
      - "443:443/udp"
    cap_add:
      - NET_ADMIN
    volumes:
      - ./config:/etc/caddy:z
      - caddy_data:/data
      - caddy_config:/config
    networks:
      - proxy
    security_opt:
      - no-new-privileges:true

volumes:
  caddy_data: {}
  caddy_config: {}

networks:
  proxy:
    external: true