[Unit]
Description=Caddy Web server
Documentation=https://caddyserver.com/docs/
After=network-online.target

[Service]
User=http
Group=http
ExecStart=/usr/bin/caddy run --environ
ExecReload=/usr/bin/caddy reload
WorkingDirectory=/srv/http
PrivateTmp=true
ProtectHome=true
PrivateDevices=true
ProtectSystem=strict
ReadWritePaths=/srv/http/.local /srv/http/.config
AmbientCapabilities=CAP_NET_BIND_SERVICE
TimeoutStopSec=5s

[Install]
WantedBy=multi-user.target
