From 59b997513f0ac898e2e06108596091b392a26092 Mon Sep 17 00:00:00 2001
From: traveler <phil@pncharris.com>
Date: Tue, 21 Oct 2025 14:18:23 -0500
Subject: [PATCH] kopia

---
 kopia.yaml | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 kopia.yaml

diff --git a/kopia.yaml b/kopia.yaml
new file mode 100644
index 0000000..5a910aa
--- /dev/null
+++ b/kopia.yaml
@@ -0,0 +1,43 @@
+services:
+  kopia:
+    image: kopia/kopia:latest
+    container_name: kopia
+    hostname: kopia
+    restart: unless-stopped
+    user: "1001:998"
+    environment:
+      PUID: 1001
+      PGID: 998
+      TZ: America/Chicago
+      KOPIA_PASSWORD: F@lcon13
+      KOPIA_SERVER_USERNAME: admin
+      KOPIA_SERVER_PASSWORD: F@lcon13
+    command: server start --insecure --address=0.0.0.0:51515 --disable-csrf-token-check
+    volumes:
+      - /DockerVol/kopia/config:/app/config
+      - /DockerVol/kopia/cache:/app/cache
+      - /srv/a18f546e-e9bf-4a8d-8b9d-02e7ec32b632/repository:/repository
+      - /DockerVol/kopia/logs:/app/logs
+    networks:
+      - netgrimoire
+    deploy:
+      placement:
+        constraints:
+          - node.hostname == nas
+      labels:
+        diun.enable: "true"
+        homepage.group: "Backup"
+        homepage.name: "Kopia"
+        homepage.icon: "kopia.png"
+        homepage.href: "https://kopia.${DOMAIN}"
+        homepage.description: "Snapshot backup and deduplication"
+        kuma.kopia.http.name: "Kopia Web"
+        kuma.kopia.http.url: "http://kopia:51515"
+        # Caddy reverse proxy (optional)
+        caddy: backrest.netgrimoire.com
+        caddy.import: authentik
+        caddy.reverse_proxy: {{upstreams 51515}}
+
+networks:
+  netgrimoire:
+    external: true