The compose file references the image docker.internal:5000/caddy:latest that does not exist publicly because the image was built using the provided caddy Dockerfile that compiles additional modules for caddy.

The configuration:

    cap_add:
      - NET_ADMIN

specifies that caddy is able to run on privileged ports (required due to caddy being configured to be a front-facing reverse-proxy).