services:
  borg-ui:
    image: ainullcode/borg-ui@sha256:b44c0a92b650d80f215a986dadda5c2604c61eb28a7571e19c046eff41d761e7
    container_name: borg-ui
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - PORT=8081
      - PUID=0
      - PGID=0
      - LOG_LEVEL=INFO
    volumes:
      - /mnt/user/appdata/borg-ui/data:/data
      - /mnt/user/appdata/borg-ui/cache:/home/borg/.cache/borg
      - /mnt/user/appdata:/local/appdata:ro
      - /mnt/user/appdata/secrets:/local/secrets:ro
      - /mnt/user/backups/borg/dumps:/local/borg-dumps:ro
      - /mnt/user/documents/scans_inbox:/local/paperless/consume:ro
      - /mnt/user/documents/paperless:/local/paperless/media:ro
      - /mnt/user/documents/paperless/export:/local/paperless/export:ro
      - /mnt/user/documents/nextcloud-data:/local/nextcloud/data:ro
      - /mnt/user/photos/immich:/local/immich/upload:ro
      - /mnt/user/photos/family_archive:/local/immich/external:ro
      - /mnt/user/services:/local/services:ro
      - /mnt/user/services/gitea/data:/local/gitea/data:ro
      - /mnt/user/appdata/borg-ui/restore:/restore
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - frontend_net
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.borg-ui.rule=Host(`borg.kaleschke.info`)
      - traefik.http.routers.borg-ui.entrypoints=websecure
      - traefik.http.routers.borg-ui.tls=true
      - traefik.http.routers.borg-ui.tls.certresolver=le
      - traefik.http.routers.borg-ui.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.borg-ui.loadbalancer.server.port=8081

networks:
  frontend_net:
    external: true