FROM docker.io/library/caddy:2.11.4-alpine AS source

RUN setcap -r /usr/bin/caddy

FROM scratch

COPY --from=source /usr/bin/caddy /usr/bin/caddy
COPY --from=source /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt

ENTRYPOINT ["/usr/bin/caddy"]
CMD ["run", "--config", "/etc/caddy/Caddyfile", "--adapter", "caddyfile"]