first commit

deploy/caddy/docker-compose.yml

@@ -0,0 +1,28 @@
+# Caddy reverse proxy — terminates TLS and forwards to the frontend container.
+# Included by root docker-compose.yml on the AWS mail/app host.
+
+services:
+  caddy:
+    image: caddy:2-alpine
+    container_name: agmail-caddy
+    restart: unless-stopped
+    ports:
+      - "${CADDY_HTTP_PORT:-80}:80"
+      - "${CADDY_HTTPS_PORT:-443}:443"
+      - "${CADDY_HTTPS_PORT:-443}:443/udp"
+    environment:
+      APP_PUBLIC_HOST: ${APP_PUBLIC_HOST:-email.getall.help}
+      CADDY_ACME_EMAIL: ${CADDY_ACME_EMAIL:?Set CADDY_ACME_EMAIL for Let's Encrypt}
+    env_file:
+      - ../../.env
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    depends_on:
+      frontend:
+        condition: service_started
+
+volumes:
+  caddy_data:
+  caddy_config: