vault

swarm/vault.yaml

@@ -0,0 +1,56 @@
+services:
+  vault:
+    image: kopia/kopia:latest
+    container_name: kopia
+    hostname: kopia
+    restart: unless-stopped
+    user: "1964:1964"
+    ports:
+      -  51516:51516
+    environment:
+      PUID: 1964
+      PGID: 1964
+      TZ: America/Chicago
+      KOPIA_PASSWORD: F@lcon13
+      KOPIA_SERVER_USERNAME: admin
+      KOPIA_SERVER_PASSWORD: F@lcon13
+    command: 
+      - server
+      - start
+      #- --tls-generate-cert
+      - --tls-cert-file=/app/cert/my.cert
+      - --tls-key-file=/app/cert/my.key
+      - --address=0.0.0.0:51515
+      - --server-username=admin
+      - --server-password=F@lcon13
+    volumes:
+      - /DockerVol/vault/config:/app/config
+      - /DockerVol/vault/cache:/app/cache
+      - /DockerVol/vault/cert:/app/cert
+      - /srv/vault/backup:/vault
+      - /DockerVol/vault/logs:/app/logs
+    networks:
+      - netgrimoire
+    deploy:
+      endpoint_mode: dnsrr
+      placement:
+        constraints:
+          - node.hostname == znas
+      labels:
+        diun.enable: "true"
+        homepage.group: "Backup"
+        homepage.name: "Vault"
+        homepage.icon: "kopia.png"
+        homepage.href: "https://vault.netgrimoire.com"
+        homepage.description: "Snapshot backup and deduplication"
+        kuma.kopia.http.name: "Kopia Web"
+        kuma.kopia.http.url: "http://vault:51515"
+        # Optional Caddy reverse proxy
+        caddy: kopia.netgrimoire.com
+        caddy.import: authentik
+        caddy.reverse_proxy: "vault.netgrimoire.com:51516"
+      
+
+networks:
+  netgrimoire:
+    external: true