[Unit]
Description=Reverse Proxy
Documentation=https://caddyserver.com/docs/
AssertPathIsDirectory=/data/Databases/caddy/etc
AssertPathExists=/data/Databases/caddy/etc/Caddyfile
AssertPathIsDirectory=/data/Databases/caddy/data
AssertPathIsDirectory=/data/Databases/caddy/config

[Service]
Restart=on-failure
TimeoutStartSec=300

[Container]
ContainerName=caddy
Image=docker.io/library/caddy:latest
AutoUpdate=registry
Network=reverse.network
PublishPort=443:443
PublishPort=80:80
NoNewPrivileges=true
Notify=true
ReadOnly=true
Volume=/data/Databases/caddy/etc:/etc/caddy:Z
Volume=/data/Databases/caddy/config:/config:Z
Volume=/data/Databases/caddy/data:/data:Z
Volume=/data/pkg:/srv/pkg:ro,z
Volume=/data/sites:/srv/sites:ro,z
Volume=/data/toad-ingress:/run/toad-ingress:ro

[Install]
WantedBy=default.target