services:
  restic-server:
    image: restic/rest-server:latest
    container_name: restic-server
    restart: always 
    user: "0:0"
    command: ["rest-server", "--listen", ":8080", "--path", "/data", "--no-auth"]
    environment:
      - TZ=America/Montreal
    volumes:
      - /mnt/HoardingCow_docker_data/Restic/data:/data
    networks:
      - backup_net
    labels:
      - "traefik.enable=false"

  restic-browser:
    image: floibach/restic-browser:latest
    container_name: restic-browser
    restart: always
    ports:
      - "8081:8080"
    environment:
      - TZ=America/Montreal
    volumes:
      - /mnt/HoardingCow_docker_data/Restic:/repo:ro
      - /mnt/HoardingCow_docker_data/Restic/browser-data:/data
    networks:
      - backup_net
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.restic-browser-http.rule=Host(`backup.lazyworkhorse.net`)"
      - "traefik.http.routers.restic-browser-http.entrypoints=web"
      - "traefik.http.routers.restic-browser-http.middlewares=redirect-to-https@docker"
      - "traefik.http.routers.restic-browser.rule=Host(`backup.lazyworkhorse.net`)"
      - "traefik.http.routers.restic-browser.entrypoints=websecure"
      - "traefik.http.routers.restic-browser.tls=true"
      - "traefik.http.routers.restic-browser.tls.certresolver=njalla"
      - "traefik.http.services.restic-browser.loadbalancer.server.port=8080"

networks:
  backup_net:
    external: true
    name: backup_net