Switch Caddy to hardened non-root image

docker-compose.core.yml

@@ -2,11 +2,11 @@ version: "3"
 
 services:
     reverse_caddy:
-        image: caddy:2.11-alpine
+        image: dhi.io/caddy:2.11
         ports:
-            - "80:80"
-            - "443:443"
-            - "443:443/udp"
+            - "80:8080"
+            - "443:8443"
+            - "443:8443/udp"
         configs:
             - source: caddy_config
               target: /etc/caddy/Caddyfile