From 2a6755f41a32b6d0cd564a617de372994c424ec7 Mon Sep 17 00:00:00 2001
From: traveler <phil@pncharris.com>
Date: Thu, 30 Apr 2026 17:46:13 -0500
Subject: [PATCH] yt

---
 swarm/kopia.yaml | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/swarm/kopia.yaml b/swarm/kopia.yaml
index 992984c..a00c8f3 100644
--- a/swarm/kopia.yaml
+++ b/swarm/kopia.yaml
@@ -42,14 +42,21 @@ services:
           - node.hostname == znas
       labels:
         gremlin.version: "2026-04-1"
+        gremlin.caddy.reverse_proxy.skip: "true"
+        gremlin.context: "Kopia runs its own TLS on port 51515. caddy.reverse_proxy must use https:// with tls_insecure_skip_verify. monitor.url uses tcp check as HTTP will fail against a TLS endpoint."
+
         # --- Caddy ---
         caddy: kopia.netgrimoire.com
-        caddy.reverse_proxy: kopia:51515
+        caddy.reverse_proxy: https://kopia:51515
+        caddy.reverse_proxy.transport: http
+        caddy.reverse_proxy.transport.tls_insecure_skip_verify: true
         caddy.import_1: crowdsec
         caddy.import_2: authentik
-  
 
-        # --- Uptime Kuma ---
+        # --- Monitor ---
+        monitor.name: Kopia
+        monitor.url: tcp://kopia:51515
+        monitor.type: tcp
 
         # --- Homepage ---
         homepage.group: Backup
@@ -57,14 +64,10 @@ services:
         homepage.icon: kopia.png
         homepage.href: https://kopia.netgrimoire.com
         homepage.description: Snapshot backup and deduplication
-        monitor.name: Kopia
-        monitor.url: http://kopia:51515
 
         # --- DIUN ---
         diun.enable: "true"
 
 networks:
   netgrimoire:
-    external: true
-
-##
\ No newline at end of file
+    external: true
\ No newline at end of file