# The local network's own address with HTTPS (https://10.0.0.25), no domain: Caddy signs the
# certificate itself (Caddyfile from ../../relay/Caddyfile.lan). setup.sh turns this on
# (COMPOSE_FILE in .env) when you pick 「區網 IP」.
#
# Caddy listens only on that address, so it works next to Tailscale (whose `tailscale serve`
# holds 443 on the Tailscale address): at home https://10.0.0.25, away the ts.net address.
# Needs docker compose 2.24.4 or newer (!reset / !override).
services:
  caddy:
    # Started even when docker-compose.tailscale.yml (listed before this) leaves Caddy out.
    profiles: !reset []
    ports: !override
      - "${ANYBOT_LAN_IP:?ANYBOT_LAN_IP}:80:80"
      - "${ANYBOT_LAN_IP:?ANYBOT_LAN_IP}:443:443"