Web Application Lab: Caddy, Frontend, API, Database¶

flowchart LR
  I[Internet] --> C[Caddy :443]
  C --> F[frontend]
  C --> A[api]
  A --> D[(database)]

Caddy is the public reverse proxy. The frontend, API, and database belong on an internal user-defined network; only Caddy normally publishes public ports. Docker automates private networks and internal DNS. Administrators still own domain DNS, firewall policy, TLS policy, secrets, backups, authorization, and observability.