services:
  vault:
    image: kopia/kopia:latest
    user: "1964:1964"
    ports:
      -  51516:51515
    environment:
      PUID: 1964
      PGID: 1964
      TZ: America/Chicago
      KOPIA_PASSWORD: F@lcon13
      KOPIA_SERVER_USERNAME: admin
      KOPIA_SERVER_PASSWORD: F@lcon13
    command: 
      - server
      - start
      #- --tls-generate-cert
      - --tls-cert-file=/app/cert/my.cert
      - --tls-key-file=/app/cert/my.key
      - --address=0.0.0.0:51515
      - --server-username=admin
      - --server-password=F@lcon13
    volumes:
      - /DockerVol/vault/config:/app/config
      - /DockerVol/vault/cache:/app/cache
      - /DockerVol/vault/cert:/app/cert
      - /srv/vault/backup/repository:/vault
      - /DockerVol/vault/logs:/app/logs
    networks:
      - netgrimoire
    deploy:
      restart_policy:
        condition: any
        delay: 5s
        max_attempts: 3
        window: 120s
      placement:
        constraints:
          - node.platform.arch != arm
          - node.platform.arch != aarch64
          - node.hostname == znas
      labels:
        gremlin.version: "2026-04-1"
        diun.enable: "true"
        # --- Caddy ---
        # --- Caddy ---
        gremlin.caddy.skip: "true"
        gremlin.authentik.skip: "true"
        gremlin.homepage.skip: "true"
      
        # --- Monitor ---
        monitor.name: Kopia-Vault
        monitor.url: tcp://kopia:51516
        monitor.type: tcp



        # --- Homepage ---
        homepage.group: Backup
        homepage.name: Kopia-Vault
        homepage.icon: kopia.png
        homepage.href: https://192.168.5.10:51516
        homepage.description: Snapshot backup and deduplication
     

networks:
  netgrimoire:
    external: true