services:
  backrest:
    image: garethgeorge/backrest:latest
    container_name: backrest
    restart: unless-stopped
    networks:
      - homelab-network
      - traefik-network
    ports:
      - '9898:9898'
    volumes:
      - ./data:/data
      - ./config:/config
      - ${STACKS_DIR}:${STACKS_DIR}:ro # Backup source
      - /mnt:/mnt:ro # Backup additional drives
      - ./cache:/cache
    environment:
      - BACKREST_DATA=/data
      - BACKREST_CONFIG=/config/config.json
      - TZ=${TZ}
    healthcheck:
      test: ['CMD', 'wget', '--quiet', '--tries=1', '--spider', 'http://localhost:9898/']
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    labels:
      - 'com.centurylinklabs.watchtower.enable=true'
      - 'homelab.category=utilities'
      - 'homelab.description=Backup management with restic'
      - 'traefik.enable=true'
      - 'traefik.docker.network=traefik-network'
      - 'traefik.http.routers.backrest.rule=Host(`backrest.jasper.kelinreij.duckdns.org`)'
      - 'traefik.http.routers.backrest.entrypoints=websecure'
      - 'traefik.http.routers.backrest.tls.certresolver=letsencrypt'
      - 'traefik.http.routers.backrest.middlewares=authelia@docker'
      - 'traefik.http.services.backrest.loadbalancer.server.port=9898'
 
networks:
  homelab-network:
    external: true
  traefik-network:
    external: true

x-dockge:
  urls:
    - https://${PROXY_URL}
    - ${LOCAL_URL}

x-arcane:
  icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/svg/backrest.svg
  urls:
    - https://${PROXY_URL}
    - ${LOCAL_URL}