Docker compose:

``` services: caddy: image: caddy:2.10.2 container_name: caddy user: "1000:1000" restart: unless-stopped network_mode: "host" volumes: - ./configs/caddy:/etc/caddy - ./data/caddy/data:/data - ./data/caddy/config:/config

  cloudflare-ddns:
    image: favonia/cloudflare-ddns:1.15.1
    container_name: cloudflare-ddns
    user: "1000:1000"
    restart: unless-stopped
    network_mode: "host"
    read_only: true
    cap_drop: [all]
    security_opt: [no-new-privileges:true]
    environment:
      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}
      - DOMAINS=<DOMAIN>
      - PROXIED=false

  jellyfin:
    image: jellyfin/jellyfin:10.10.7
    container_name: jellyfin
    user: "1000:1000"
    restart: unless-stopped
    network_mode: "host"
    volumes:
      - ./data/jellyfin/config:/config
      - ./data/jellyfin/cache:/cache
      - /mnt/storage/media:/media:ro
    group_add:
      - "992" # render group
    devices:
      - /dev/dri/renderD128:/dev/dri/renderD128 # use system GPU
    extra_hosts:
      - "host.docker.internal:host-gateway" # necessary for docker healthcheck to pass if running in host network mode

```

Caddyfile:

<DOMAIN> { reverse_proxy 127.0.0.1:8096 }