version: '3'

services:

  restic-server:
    image: restic/rest-server
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.rest-server.entrypoints=websecure
      - traefik.http.routers.rest-server.rule=Host(`restic-zuhause.mertens.digital`)
      - traefik.http.routers.rest-server.tls=true
      - traefik.http.routers.rest-server.tls.certresolver=letsencrypt
      - traefik.http.services.rest-server.loadbalancer.server.port=8000
    networks:
      - proxy
#    networks:
#      - caddy
#    labels:
#      caddy: restic-zuhause.mertens.digital
#      caddy.reverse_proxy: "{{upstreams 8000}}"
    volumes:
      - /mnt/helmut/backup/restic:/data    
    environment:
      OPTIONS: "--private-repos --append-only"

networks:
  proxy:
    external: true




 # whoami:
  #   image:  traefik/whoami
  #   command:
  #      - --port=2001
  #      - --name=test
  #   ports:
  #      - "2001:2001"
  #   networks:
  #     - proxy
  #   labels:
  #     - "traefik.enable=true"
  #     - "traefik.http.routers.whoami.entrypoints=websecure"
  #     - "traefik.http.routers.whoami.rule=Host(`whoami.dev.mertens.digital`)"
  #     - "traefik.http.routers.whoami.tls=true"
  #     - "traefik.http.routers.whoami.tls.certresolver=letsencrypt"
  #     - "traefik.http.services.whoami.loadbalancer.server.port=2001"