services:
  admin-proxy:
    ports:
      - "10.0.0.1:80:80"
      - "10.0.0.1:443:443"
    environment:
      ADMIN_HOSTNAME: admin.example.com

  admin-api:
    environment:
      ADMIN_API_PORT: 5181
      ADMIN_WEB_ORIGIN: https://admin.example.com

# Common customizations:
# - Change the external network name in compose.yml if your Stoat stack uses a different name.
# - Bind admin-proxy to the interface IP that should answer ports 80/443.
# - Ensure ADMIN_HOSTNAME resolves to that IP on your WireGuard/private network.
# - Add resource limits or alternate image tags per deployment.