services:
  duplicati:
    image: lscr.io/linuxserver/duplicati:latest
    container_name: duplicati
    restart: unless-stopped
    environment:
      - PUID=2011 # duplicati
      - PGID=2011 # duplicati
      - TZ=GB
      - FILE__SETTINGS_ENCRYPTION_KEY=/run/secrets/settings_encryption_key
    networks:
      - duplicati_network
    secrets:
      - settings_encryption_key
    ports:
      - 8200:8200 # Web UI
    volumes:
      # Mount passwd and group to give user group permissions required for accessing files to backup
      - /etc/passwd:/etc/passwd:ro
      - /etc/group:/etc/group:ro
      # Regular configuration stuff
      - ./config:/config:rw
      - ./source:/source:rw
      - /mnt/duplicati_backup_1/backups:/backups:rw
      # Sources
      - /services/syncthing/data/Contacts:/source/Contacts:ro
      - /services/syncthing/data/KeePass:/source/KeePass:ro
      - /services/syncthing/data/Obsidian:/source/Obsidian:ro
      - /services/syncthing/data/SMS:/source/SMS:ro

networks:
  duplicati_network:
    name: duplicati_network

secrets:
  settings_encryption_key:
    file: ./settings_encryption_key.bin