docker-compose/caddy-cloudflare-ddns-crowdsec/compose.yaml

services:
  crowdsec:
    container_name: crowdsec
    image: ghcr.io/crowdsecurity/crowdsec:v1.7.7@sha256:6ca53ad26196ca59ddd4fa692a586b73d8fcde085046163b9ca2f04887dca563
    restart: unless-stopped
    environment:
      - BOUNCER_KEY_CADDY=${CROWDSEC_API_KEY}
      - GID=${GID}
      - COLLECTIONS=${COLLECTIONS}
    volumes:
      - ${APPDATA_PATH}/caddy/crowdsec-acquis.d:/etc/crowdsec/acquis.d
      - ${APPDATA_PATH}/caddy/crowdsec-db:/var/lib/crowdsec/data/
      - ${APPDATA_PATH}/caddy/crowdsec-config:/etc/crowdsec/
      - ${APPDATA_PATH}/caddy/caddy-logs:/var/log/caddy:ro
    networks:
      - frontend
    healthcheck:
      test: ["CMD-SHELL", "wget --spider --quiet --tries=1 --timeout=5 http://localhost:8080/health > /dev/null 2>&1 || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

  caddy:
    container_name: caddy
    image: ghcr.io/ryuupendragon/caddy-cloudflare-ddns-crowdsec:2.11.2@sha256:ba26a5f05c825d61f5ca6f43de368a3e01013c10b592bfe5fcd187d9328b6289
    restart: unless-stopped
    depends_on:
      crowdsec:
        condition: service_healthy
    cap_add:
      - NET_ADMIN
    environment:
      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
      - CROWDSEC_API_KEY=${CROWDSEC_API_KEY}
    volumes:
      - ${APPDATA_PATH}/caddy/caddy-file:/etc/caddy
      - ${APPDATA_PATH}/caddy/caddy-config:/config
      - ${APPDATA_PATH}/caddy/caddy-data:/data
      - ${APPDATA_PATH}/caddy/caddy-logs:/logs
      - ${APPDATA_PATH}/caddy/caddy-srv:/srv
    ports:
      - ${HTTP_PORT}:80
      - ${HTTPS_PORT}:443
      - ${HTTPS_PORT}:443/udp
    networks:
      - frontend

networks:
  frontend:
    external: true