From e0a781a39a72d9f9751a2faba33df14c533e0a0b Mon Sep 17 00:00:00 2001
From: krisz <kszabolcsi@laurel.hu>
Date: Tue, 19 Aug 2025 18:47:53 +0200
Subject: [PATCH] add Duplicati backup service configuration to
 docker-compose.yml

---
 services/.env.example       |  3 ++-
 services/docker-compose.yml | 40 ++++++++++++++++++++++++++++++++++++-
 2 files changed, 41 insertions(+), 2 deletions(-)

diff --git a/services/.env.example b/services/.env.example
index 997ed2c..5a4335d 100644
--- a/services/.env.example
+++ b/services/.env.example
@@ -1,3 +1,4 @@
 GITEA_DB_PASSWORD=
 HAPROXY_CONFIG_NAME=
-GITEA_RUNNER_TOKEN=
\ No newline at end of file
+GITEA_RUNNER_TOKEN=
+DUPLICATI_PASSWORD=
\ No newline at end of file
diff --git a/services/docker-compose.yml b/services/docker-compose.yml
index 0c730b0..ecd1a79 100644
--- a/services/docker-compose.yml
+++ b/services/docker-compose.yml
@@ -216,6 +216,30 @@ services:
       - --rdb-save-incremental-fsync yes
       - --jemalloc-bg-thread yes
 
+  duplicati:
+    image: duplicati/duplicati:2.1.1.101-canary
+    environment:
+      - DUPLICATI__WEBSERVICE_PASSWORD=${DUPLICATI_PASSWORD}
+      - DUPLICATI__DISABLE_DB_ENCRYPTION=true
+    volumes:
+      - nfs:/nfs
+      - duplicati-data:/data
+    networks:
+      - local
+      - traefik
+    deploy:
+      replicas: 1
+      <<: *api-deployment
+      labels:
+        <<: *traefik-labels
+        traefik.http.routers.duplicati.rule: "Host(`duplicati.szabolcsi.dev`)"
+        traefik.http.routers.duplicati.entrypoints: "https"
+        traefik.http.routers.duplicati.tls: "true"
+        traefik.http.routers.duplicati.tls.certresolver: "letsencrypt"
+        traefik.http.routers.duplicati.middlewares: "local"
+        traefik.http.services.duplicati.loadbalancer.server.port: "8200"
+
+
 
 networks:
   local:
@@ -240,7 +264,6 @@ networks:
   portainer:
     external: true
 
-
 volumes:
   gitea:
     name: gitea-data
@@ -254,6 +277,21 @@ volumes:
     driver: local
   redis-data:
     driver: local
+  nfs:
+    name: nfs-share
+    driver: local
+    driver_opts:
+      type: nfs
+      device: ":/nfs_share"
+      o: "addr=10.0.0.3,ro,soft,nfsvers=4"
+  duplicati-data:
+    name: duplicati-data
+    driver: local
+    driver_opts:
+      type: nfs
+      device: ":/nfs_share/services/duplicati"
+      o: "addr=10.0.0.3,rw,soft,nfsvers=4"
+
 
 configs:
   haproxy: