# Optional server-side ingress. Existing HTTPS proxies should route the same
# service instead of starting a second proxy or opening an extra Agent port.
services:
  https:
    image: ${YUKI_CADDY_IMAGE:?set an explicitly selected Caddy 2 image}
    restart: unless-stopped
    environment:
      YUKI_PUBLIC_HOST: ${YUKI_PUBLIC_HOST:?set the real public hostname}
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./config/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy-data:/data
      - caddy-config:/config
    networks:
      - yuki-network
volumes:
  caddy-data:
  caddy-config: