diff --git a/backup/docker-compose.yaml b/backup/docker-compose.yaml
index 75f17cb..410f79f 100644
--- a/backup/docker-compose.yaml
+++ b/backup/docker-compose.yaml
@@ -7,31 +7,37 @@ volumes:
     name: duplicati-conf
   nextcloud-data:
     external: true
+  gitea:
+    external: true
 
 services:
   duplicati:
-    image: duplicati/duplicati:beta
+    image: duplicati/duplicati:stable
     restart: unless-stopped
     container_name: duplicati
     hostname: duplicati
-    ports:
-      - "8200:8200"
     volumes:
       - duplicati-conf:/data
       - nextcloud-data:/nextcloud:ro
+      - gitea:/gitea:ro
       - /media/backup:/backup
-    networks:
-      - proxy
     environment:
       DUPLICATI__DISABLE_DB_ENCRYPTION: true
-    deploy:
-      resources:
-        limits:
-          memory: 16g
+      DUPLICATI__WEBSERVICE_ALLOWEDHOSTNAMES: backup.fam-steinle.de
+    networks:
+      - proxy
+    ports:
+      - "8200:8200"
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.duplicati.entrypoints=web"
-      - "traefik.http.routers.duplicati.rule=Host(`duplicati.lan`)"
-      - "traefik.http.services.duplicati.loadbalancer.server.port=8200"
-
+      - "traefik.http.routers.duplicati.rule=Host(`backup.fam-steinle.de`)"
+      - "traefik.http.routers.duplicati.middlewares=duplicati"
+      - "traefik.http.middlewares.duplicati.redirectscheme.scheme=https"
+      - "traefik.http.routers.duplicati-secure.entrypoints=websecure"
+      - "traefik.http.routers.duplicati-secure.rule=Host(`backup.fam-steinle.de`)"
+      - "traefik.http.routers.duplicati-secure.service=duplicati-secure"
+      - "traefik.http.routers.duplicati-secure.tls=true"
+      - "traefik.http.routers.duplicati-secure.tls.certresolver=myresolver"
+      - "traefik.http.services.duplicati-secure.loadbalancer.server.port=8200"