[Unit] Description=Caddy [Container] AddCapability=NET_ADMIN ContainerName=caddy Image=docker.io/caddy:2 Network=host SecurityLabelDisable=true Volume=/etc/caddy:/etc/caddy Volume=caddy_data:/data Volume=caddy_config:/config [Service] Restart=always [Install] WantedBy=default.target