[Unit]
Description=Caddy reverse proxy (Desec.io DNS challenge)

[Container]
Image=caddy.build
ContainerName=caddy
PublishPort=8080:80
PublishPort=8443:443
Volume=./Caddyfile:/etc/caddy/Caddyfile:ro,Z
Volume=caddy-data:/data
Volume=caddy-config:/config

Secret=desec-token,type=env,target=DESEC_TOKEN

# For ACME notifications
EnvironmentFile=./config.env

[Service]
Restart=always
RestartSec=3

[Install]
WantedBy=default.target