networks:
  proxy:
    external: true

volumes:
  duplicati-conf:
    name: duplicati-conf
  nextcloud-data:
    external: true
  gitea:
    external: true

services:
  duplicati:
    image: duplicati/duplicati:stable
    restart: unless-stopped
    container_name: duplicati
    hostname: duplicati
    volumes:
      - duplicati-conf:/data
      - nextcloud-data:/nextcloud:ro
      - gitea:/gitea:ro
      - /media/backup:/backup
    environment:
      DUPLICATI__DISABLE_DB_ENCRYPTION: true
      DUPLICATI__WEBSERVICE_ALLOWEDHOSTNAMES: backup.fam-steinle.de
    networks:
      - proxy
    ports:
      - "8200:8200"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.duplicati.entrypoints=web"
      - "traefik.http.routers.duplicati.rule=Host(`backup.fam-steinle.de`)"
      - "traefik.http.routers.duplicati.middlewares=duplicati"
      - "traefik.http.middlewares.duplicati.redirectscheme.scheme=https"
      - "traefik.http.routers.duplicati-secure.entrypoints=websecure"
      - "traefik.http.routers.duplicati-secure.rule=Host(`backup.fam-steinle.de`)"
      - "traefik.http.routers.duplicati-secure.service=duplicati-secure"
      - "traefik.http.routers.duplicati-secure.tls=true"
      - "traefik.http.routers.duplicati-secure.tls.certresolver=myresolver"
      - "traefik.http.services.duplicati-secure.loadbalancer.server.port=8200"