services:
  # Caddy
  caddy:
    image: caddy:latest
    container_name: caddy
    profiles:
      - caddy
    restart: on-failure:5
    ports:
      - 80:80
      - 443:443
    volumes:
      - wordpress:/var/www/html:rw
      - caddy_data:/data:rw
      - caddy_config:/config:rw
      - ./caddy:/etc/caddy:ro
    networks:
      - infra-network
    env_file:
      - env/caddy.env
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
#      - CHOWN
#      - FOWNER
#      - DAC_OVERRIDE
#      - SETGID
#      - SETUID
      - NET_BIND_SERVICE
    healthcheck:
      test: pidof caddy || exit 1
      interval: 120s
      timeout: 10s
      retries: 3

volumes:
  caddy_data:
    name: caddy_data
  caddy_config:
    name: caddy_config