---
version: "3.4"

services:
  wkd:
    image: caddy:2
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=${COMPOSE_PROJECT_NAME}_default"
      - "traefik.http.routers.wkd.rule=(Host(`tobiasmanske.de`) && PathPrefix(`/{path:.well-known/openpgpkey}/`) || Host(`openpgpkey.tobiasmanske.de`))"
      - "traefik.http.routers.wkd.entryPoints=websecure"
      - "traefik.http.routers.wkd.priority=100"
      - "traefik.http.services.wkd.loadbalancer.server.port=80"
    restart: always
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro,z
      - ./data:/data:ro,Z
...