# Tailscale instead of a public domain: only devices in your tailnet reach this server, and
# Tailscale gives it HTTPS (`tailscale serve`), so Caddy isn't started and ports 80/443 stay closed.
# setup.sh turns this on (COMPOSE_FILE in .env) when you pick 「用 Tailscale」.
services:
  caddy:
    profiles: ["caddy"]
  relay:
    ports:
      - "127.0.0.1:8780:8080"