docker-compose.yml

version: '3.2'

services:
  agent:
    image: portainer/agent:2.15.1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - /var/lib/docker/volumes:/var/lib/docker/volumes
    networks:
      - agent_network
    deploy:
      mode: global
      placement:
        constraints: [node.platform.os == linux]

  portainer:
    image: portainer/portainer-ce:2.15.1
    command: -H tcp://tasks.agent:9001 --tlsskipverify
    volumes:
      - portainer_data:/data
    networks:
      - agent_network
      - caddy_public
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]

  caddy:
    image: caddy:2-alpine
    restart: unless-stopped
    environment:
      SERVER_NAME: ${SERVER_NAME:-localhost}
    networks:
      - caddy_public
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile
      - caddy_data:/data
      - caddy_config:/config
    ports:
      # HTTP
      - target: 80
        published: ${HTTP_PORT:-80}
        protocol: tcp
      # HTTPS
      - target: 443
        published: ${HTTPS_PORT:-443}
        protocol: tcp
      # HTTP/3
      - target: 443
        published: ${HTTP3_PORT:-443}
        protocol: udp

networks:
  agent_network:
    driver: overlay
    attachable: true
  caddy_public:
    driver: overlay
    attachable: true

volumes:
  portainer_data:
  caddy_data:
  caddy_config: