From cb29c68d75a96b4c73aac1d12a4b00f530a20272 Mon Sep 17 00:00:00 2001
From: Davide Grilli <davide.grilli@outlook.com>
Date: Tue, 25 Aug 2026 19:23:56 +0200
Subject: [PATCH] Fix ACME DNS resolution failures in the caddy container

The host's systemd-resolved stub (127.0.0.53) is unreachable from inside
the container network namespace, so Caddy could not resolve Let's Encrypt
endpoints. Point it at public resolvers instead.
---
 docker-compose.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 56fe666..91a8036 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -64,6 +64,11 @@ services:
     ports:
       - "80:80"
       - "443:443"
+    # Host uses systemd-resolved (127.0.0.53), unreachable from inside the
+    # container network namespace; ACME lookups need a real resolver.
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
     environment:
       PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}
       CMS_DOMAIN: ${CMS_DOMAIN}