services:
  caddy:
    build:
      args:
        CADDYFILE: deploy/caddy/Caddyfile.local
    ports: !override
      - "8080:80"
    environment: !reset {}

  # Local PEM files are commonly mode 0600 and owned by the host user.
  # Production keeps the backend non-root and uses keys owned by UID 10001.
  backend:
    user: "0:0"

  migrate:
    user: "0:0"