services:
  caddy:
    image: caddy:2.11.7-alpine
    container_name: tg-web-proxy-caddy
    restart: unless-stopped
    depends_on:
      proxy:
        condition: service_healthy
    environment:
      TPROXY_HOSTNAME: ${TPROXY_HOSTNAME:?set by quick-install.sh}
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - tg_webproxy_caddy_data:/data
      - tg_webproxy_caddy_config:/config
    networks:
      - npm_network
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
    security_opt:
      - no-new-privileges:true
    pids_limit: 128
    mem_limit: 256m
    cpus: 0.50
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  tg_webproxy_caddy_data:
    name: tg_webproxy_caddy_data
  tg_webproxy_caddy_config:
    name: tg_webproxy_caddy_config