services:
  backrest:
    image: ghcr.io/garethgeorge/backrest:latest
    container_name: backrest
    restart: unless-stopped
    environment:
      - TZ=Europe/Berlin
      - BACKREST_DATA=/data
      - BACKREST_CONFIG=/config/config.json
      - XDG_CACHE_HOME=/cache
      - TMPDIR=/tmp
    volumes:
      - /mnt/user/appdata/backrest/data:/data
      - /mnt/user/appdata/backrest/config:/config
      - /mnt/user/appdata/backrest/cache:/cache
      - /mnt/user/appdata/backrest/tmp:/tmp
      - /mnt/user:/mnt/user
      # SSH für Hetzner
      - /mnt/user/appdata/backrest/ssh:/root/.ssh
      # Quellen (Backup)
      - /mnt/user/appdata:/source/appdata:ro
      - /mnt/user:/source/user:ro
      # WD Backup-Ziel
      - /mnt/remotes/192.168.178.86/Public/backrest-repos:/repos/wd
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - backend_net
      - frontend_net
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.backrest.rule=Host(`backrest.kaleschke.info`)
      - traefik.http.routers.backrest.entrypoints=websecure
      - traefik.http.routers.backrest.tls=true
      - traefik.http.routers.backrest.tls.certresolver=le
      - traefik.http.routers.backrest.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.backrest.loadbalancer.server.port=9898
      - homepage.group=Tools
      - homepage.name=Backrest
      - homepage.icon=backrest.png
      - homepage.href=https://backrest.kaleschke.info
networks:
  backend_net:
    external: true
  frontend_net:
    external: true