creating first admin and update restrictions for ordinary users

docker/caddy/caddy.conf

@@ -0,0 +1,18 @@
+example.com {
+
+    encode gzip
+
+    # --- API ---
+    handle_path /api/* {
+        reverse_proxy backend:8000
+    }
+
+    # --- Frontend ---
+    root * /var/www/site
+    file_server
+
+    log {
+        output stdout
+        format console
+    }
+}

docker/caddy/caddy.yaml

@@ -0,0 +1,19 @@
+services:
+  caddy:
+    image: caddy:<version>
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - $PWD/conf:/etc/caddy
+      - $PWD/site:/srv
+      - caddy_data:/data
+      - caddy_config:/config
+
+volumes:
+  caddy_data:
+  caddy_config: