# Caddy reverse proxy — terminates TLS and forwards to the frontend container.
# Included by root docker-compose.yml on the AWS mail/app host.

services:
  caddy:
    image: caddy:2-alpine
    container_name: agmail-caddy
    restart: unless-stopped
    ports:
      - "${CADDY_HTTP_PORT:-80}:80"
      - "${CADDY_HTTPS_PORT:-443}:443"
      - "${CADDY_HTTPS_PORT:-443}:443/udp"
    environment:
      APP_PUBLIC_HOST: ${APP_PUBLIC_HOST:-gentic.email}
      CADDY_ALT_HOST: ${CADDY_ALT_HOST:-email.getall.help}
      CADDY_ACME_EMAIL: ${CADDY_ACME_EMAIL:?Set CADDY_ACME_EMAIL for Let's Encrypt}
    env_file:
      - ../../.env
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    depends_on:
      frontend:
        condition: service_started

volumes:
  caddy_data:
  caddy_config: