version: "3.9"

networks:
  proxy:
    external: true

volumes:
  duplicati-conf:
    name: duplicati-conf
  nextcloud-data:
    external: true

services:
  duplicati:
    image: duplicati/duplicati
    restart: unless-stopped
    volumes:
      - duplicati-conf:/data
      - nextcloud-data:/nextcloud:ro
      - /mnt/raid/nextcloud_data:/backup
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.duplicati.entrypoints=web"
      - "traefik.http.routers.duplicati.rule=Host(`backup-asu.ddnss.de`)"
      - "traefik.http.routers.duplicati.middlewares=sftp"
      - "traefik.http.middlewares.duplicati.redirectscheme.scheme=https"
      - "traefik.http.routers.duplicati-secure.entrypoints=websecure"
      - "traefik.http.routers.duplicati-secure.rule=Host(`backup-asu.ddnss.de`)"
      - "traefik.http.routers.duplicati-secure.service=sftp-secure"
      - "traefik.http.routers.duplicati-secure.tls=true"
      - "traefik.http.routers.duplicati-secure.tls.certresolver=myresolver"
      - "traefik.http.services.duplicati-secure.loadbalancer.server.port=8090"