services:
  caddy:
    image: caddy:latest
    container_name: caddy-internal
    restart: unless-stopped
    ports:
      - "${HTTPS_PORT}:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - /path/to/caddy-internal/caddy_data:/data
      - /path/to/caddy-internal/caddy_config:/config
      - /path/to/caddy-internal/logs:/var/log/caddy
      - ./certs/pki_int_ca.crt:/etc/caddy/certs/pki_int_ca.crt:ro
    networks:
      - caddy-net

networks:
  caddy-net:
    external: true