FROM caddy:2-alpine

# Install nss-tools to allow Caddy to manage its internal trust store (fixes certutil warning)
# Install ca-certificates to ensure Caddy can trust external sites if needed
RUN apk add --no-cache nss-tools ca-certificates

# Expose the internal proxy ports
EXPOSE 80 443 444