feat: add Caddy reverse proxy stack for bloombase.kerkman.io

xcaddy build with caddy-dns/cloudflare for DNS-01 TLS. Host network mode
so Caddy can reach other Docker stacks on localhost. Designed as general
reverse proxy — add new site blocks to Caddyfile for future services.

Deployed to dockerhost:/home/stephan/stacks/caddy/

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

caddy/.env.example

@@ -0,0 +1 @@
+CLOUDFLARE_API_TOKEN=your_token_here

caddy/.gitignore

@@ -0,0 +1 @@
+.env

caddy/Caddyfile

@@ -0,0 +1,7 @@
+{
+	acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
+}
+
+bloombase.kerkman.io {
+	reverse_proxy localhost:8083
+}

caddy/Dockerfile

@@ -0,0 +1,6 @@
+FROM caddy:builder AS builder
+RUN xcaddy build \
+    --with github.com/caddy-dns/cloudflare
+
+FROM caddy:latest
+COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy/docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  caddy:
+    build: .
+    container_name: caddy
+    restart: unless-stopped
+    network_mode: host
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - caddy_data:/data
+      - caddy_config:/config
+    env_file: .env
+
+volumes:
+  caddy_data:
+  caddy_config: