diff --git a/swarm/kopia.yaml b/swarm/kopia.yaml
index b18a11a..1eed630 100644
--- a/swarm/kopia.yaml
+++ b/swarm/kopia.yaml
@@ -1,23 +1,19 @@
+# Run with docker stack deploy -c kopia.yaml kopia
 services:
   kopia:
     image: kopia/kopia:latest
-    container_name: kopia
     hostname: kopia
-    restart: unless-stopped
     user: "1964:1964"
-    ports:
-      -  51515:51515
     environment:
-      PUID: 1964
-      PGID: 1964
       TZ: America/Chicago
+      PUID: "1964"
+      PGID: "1964"
       KOPIA_PASSWORD: F@lcon13
       KOPIA_SERVER_USERNAME: admin
       KOPIA_SERVER_PASSWORD: F@lcon13
-    command: 
+    command:
       - server
       - start
-      #- --tls-generate-cert
       - --tls-cert-file=/app/cert/my.cert
       - --tls-key-file=/app/cert/my.key
       - --address=0.0.0.0:51515
@@ -27,30 +23,43 @@ services:
       - /DockerVol/kopia/config:/app/config
       - /DockerVol/kopia/cache:/app/cache
       - /DockerVol/kopia/cert:/app/cert
+      - /data/nfs/znas/Docker/kopia/logs:/app/logs
       - /srv/vault/kopia_repository:/repository
       - /srv/vault/backup:/vault
-      - /DockerVol/kopia/logs:/app/logs
+    ports:
+      - 51515:51515
     networks:
       - netgrimoire
     deploy:
+      restart_policy:
+        condition: any
+        delay: 5s
+        max_attempts: 3
+        window: 120s
       placement:
         constraints:
           - node.hostname == znas
       labels:
-        diun.enable: "true"
-        homepage.group: "Backup"
-        homepage.name: "Kopia"
-        homepage.icon: "kopia.png"
-        homepage.href: "https://kopia.netgrimoire.com"
-        homepage.description: "Snapshot backup and deduplication"
-        kuma.kopia.http.name: "Kopia Web"
-        kuma.kopia.http.url: "http://kopia:51515"
-        # Optional Caddy reverse proxy
+        # --- Caddy ---
         caddy: kopia.netgrimoire.com
-        caddy.import: authentik
-        caddy.reverse_proxy: "kopia.netgrimoire.com:51515"
-      
+        caddy.reverse_proxy: kopia:51515
+      #  caddy.import: crowdsec
+        caddy.import_1: authentik
+
+        # --- Uptime Kuma ---
+        kuma.kopia.http.name: Kopia
+        kuma.kopia.http.url: https://kopia.netgrimoire.com
+
+        # --- Homepage ---
+        homepage.group: Backup
+        homepage.name: Kopia
+        homepage.icon: kopia.png
+        homepage.href: https://kopia.netgrimoire.com
+        homepage.description: Snapshot backup and deduplication
+
+        # --- DIUN ---
+        diun.enable: "true"
 
 networks:
   netgrimoire:
-    external: true
+    external: true
\ No newline at end of file