# HTTPS edge on sms.taylor-co.com: forward public traffic to Traefik on ingress
# (same place tunnel-server registers Host() routes). Stops 404s when A/AAAA for
# those names point at SMS while the tunnel and labels remain on ingress.
#
# Prereq: Caddyfile (start from Caddyfile.example) lists each hostname.
#   export INGRESS=138.197.167.216
#   cp Caddyfile.example Caddyfile
#   docker compose -f http-edge.compose.yml up -d
#
# ACME: Caddy will obtain public certs for hostnames in Caddyfile (HTTP-01 to this host).

services:
  sms-http-edge:
    image: caddy:2-alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    environment:
      INGRESS: ${INGRESS:-138.197.167.216}
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config

volumes:
  caddy_data:
  caddy_config: