[Unit]
Description=PufferPanel HTTP ingress gateway
After=network-online.target pufferpanel.service
Wants=network-online.target

[Container]
ContainerName=pufferpanel-ingress
Image=docker.io/library/caddy:2
AutoUpdate=registry
Network=pufferpanel.network
NoNewPrivileges=true
DropCapability=all
AddCapability=NET_BIND_SERVICE
ReadOnly=true
PodmanArgs=--image-volume=ignore
Volume=/data/pufferpanel/gateway.Caddyfile:/etc/caddy/Caddyfile:ro
Volume=/data/pufferpanel-ingress:/run/pufferpanel-ingress

[Service]
Restart=always
TimeoutStartSec=300

[Install]
WantedBy=default.target