The trick is to run caddy on the host system no containment, then reverse proxy your wordpress containers through 8080+. Letting fail2ban and crowdsec interact with caddy through docker is too much hassle.