FROM caddy:2.11.3-alpine
# High loopback ports need no bind capability; remove the image's file capability.
RUN apk add --no-cache libcap && setcap -r /usr/bin/caddy \
    && mkdir -p /data/caddy /config/caddy \
    && chown -R 65532:65532 /data /config
USER 65532:65532
