services:
  radicale:
    image: tomsquest/docker-radicale
    container_name: radicale
    restart: unless-stopped
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
      - CHOWN
      - KILL
    volumes:
      - ./volumes/data:/data
      - ./volumes/config:/config:ro
    networks:
      - caddy

networks:
  caddy:
    external:
      name: caddy_caddy
    driver: bridge