name: ${_STACK_0}

networks:
  edge-net:
    name: ${_NET_0}
    external: true

services:
  edge:
    container_name: ${_CONTAINER_0}
    image: caddy:latest
    restart: unless-stopped
    env_file:
      - .run.env
      - .env
    networks:
      - edge-net
    cap_add:
      - NET_ADMIN # Allow Caddy to redefine memory limits based on host spec.
    ports:
      - 80:80
      - 443:443
      - 443:443/udp
    volumes:
      - ${_CADDYFILE:-./Caddyfile}:/etc/caddy/Caddyfile
      - ${_WEBROOT:-.srv/}:/srv
      - /var/log/http/:/var/log/http # Fail2Ban needs this.