[Unit]
Description=Toad HTTP ingress gateway
After=network-online.target
Wants=network-online.target

[Container]
ContainerName=toad-ingress
Image=localhost/bugabinga-toad-ingress:latest
Network=toad.network
UserNS=keep-id
NoNewPrivileges=true
DropCapability=all
ReadOnly=true
EnvironmentFile=/data/toad/ingress.env
Volume=/data/toad/gateway.Caddyfile:/etc/caddy/Caddyfile:ro
Volume=/data/toad-ingress:/run/toad-ingress

[Service]
Restart=always
TimeoutStartSec=300

[Install]
WantedBy=default.target