services:
  borg-ui:
    image: ainullcode/borg-ui:latest
    container_name: borg-ui
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=Europe/Berlin
      - PORT=8081
      - PUID=99
      - PGID=100
      - LOG_LEVEL=INFO
    volumes:
      - /mnt/user/appdata/borg-ui/data:/data
      - /mnt/user/appdata/borg-ui/cache:/home/borg/.cache/borg
      - /mnt/user/appdata:/local/appdata:ro
      - /mnt/user/appdata/borg-ui/restore:/restore
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - frontend_net
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.borg-ui.rule=Host(`borg.kaleschke.info`)
      - traefik.http.routers.borg-ui.entrypoints=websecure
      - traefik.http.routers.borg-ui.tls=true
      - traefik.http.routers.borg-ui.tls.certresolver=le
      - traefik.http.routers.borg-ui.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.borg-ui.loadbalancer.server.port=8081

networks:
  frontend_net:
    external: true