docs: update Infrastructure/Backups

Infrastructure/Backups.md

@@ -2,7 +2,7 @@
 title: Setting Up Kopia
 description: 
 published: true
-date: 2026-02-11T19:43:03.807Z
+date: 2026-02-11T19:51:39.461Z
 tags: 
 editor: markdown
 dateCreated: 2026-01-23T22:14:17.009Z
@@ -60,18 +60,62 @@ zfs create zpool/vault/backup
 ### 2. Install Kopia Server (Docker)
 
 ```bash
-# Pull and run Kopia server container
-docker run -d \
-  --name kopia-server \
-  --restart unless-stopped \
-  -p 51515:51515 \
-  -v /srv/vault/kopia_repository:/app/repository \
-  -v /srv/vault/backup:/app/vault \
-  -v /srv/vault/config:/app/config \
-  -v /srv/vault/logs:/app/logs \
-  kopia/kopia:latest server start \
-  --address=0.0.0.0:51515 \
-  --server-cert-fingerprint=696a4999f594b5273a174fd7cab677d8dd1628f9b9d27e557daa87103ee064b2
+services:
+  kopia:
+    image: kopia/kopia:latest
+    container_name: kopia
+    hostname: kopia
+    restart: unless-stopped
+    user: "1964:1964"
+    ports:
+      -  51515:51515
+    environment:
+      PUID: 1964
+      PGID: 1964
+      TZ: America/Chicago
+      KOPIA_PASSWORD: F@lcon13
+      KOPIA_SERVER_USERNAME: admin
+      KOPIA_SERVER_PASSWORD: F@lcon13
+    command: 
+      - server
+      - start
+      #- --tls-generate-cert
+      - --tls-cert-file=/app/cert/my.cert
+      - --tls-key-file=/app/cert/my.key
+      - --address=0.0.0.0:51515
+      - --server-username=admin
+      - --server-password=F@lcon13
+    volumes:
+      - /DockerVol/kopia/config:/app/config
+      - /DockerVol/kopia/cache:/app/cache
+      - /DockerVol/kopia/cert:/app/cert
+      - /srv/vault/kopia_repository:/repository
+      - /DockerVol/kopia/logs:/app/logs
+    networks:
+      - netgrimoire
+    deploy:
+      placement:
+        constraints:
+          - node.hostname == znas
+      labels:
+        diun.enable: "true"
+        homepage.group: "Backup"
+        homepage.name: "Kopia"
+        homepage.icon: "kopia.png"
+        homepage.href: "https://kopia.netgrimoire.com"
+        homepage.description: "Snapshot backup and deduplication"
+        kuma.kopia.http.name: "Kopia Web"
+        kuma.kopia.http.url: "http://kopia:51515"
+        # Optional Caddy reverse proxy
+        caddy: kopia.netgrimoire.com
+        caddy.import: authentik
+        caddy.reverse_proxy: "kopia.netgrimoire.com:51515"
+      
+
+networks:
+  netgrimoire:
+    external: true
+
 ```
 
 **Note:** Server cert SHA256 fingerprint: `696a4999f594b5273a174fd7cab677d8dd1628f9b9d27e557daa87103ee064b2`