add Duplicati backup service configuration to docker-compose.yml

services/.env.example

@@ -1,3 +1,4 @@
 GITEA_DB_PASSWORD=
 HAPROXY_CONFIG_NAME=
 GITEA_RUNNER_TOKEN=
+DUPLICATI_PASSWORD=

services/docker-compose.yml

@@ -216,6 +216,30 @@ services:
       - --rdb-save-incremental-fsync yes
       - --jemalloc-bg-thread yes
 
+  duplicati:
+    image: duplicati/duplicati:2.1.1.101-canary
+    environment:
+      - DUPLICATI__WEBSERVICE_PASSWORD=${DUPLICATI_PASSWORD}
+      - DUPLICATI__DISABLE_DB_ENCRYPTION=true
+    volumes:
+      - nfs:/nfs
+      - duplicati-data:/data
+    networks:
+      - local
+      - traefik
+    deploy:
+      replicas: 1
+      <<: *api-deployment
+      labels:
+        <<: *traefik-labels
+        traefik.http.routers.duplicati.rule: "Host(`duplicati.szabolcsi.dev`)"
+        traefik.http.routers.duplicati.entrypoints: "https"
+        traefik.http.routers.duplicati.tls: "true"
+        traefik.http.routers.duplicati.tls.certresolver: "letsencrypt"
+        traefik.http.routers.duplicati.middlewares: "local"
+        traefik.http.services.duplicati.loadbalancer.server.port: "8200"
+
+
 
 networks:
   local:
@@ -240,7 +264,6 @@ networks:
   portainer:
     external: true
 
-
 volumes:
   gitea:
     name: gitea-data
@@ -254,6 +277,21 @@ volumes:
     driver: local
   redis-data:
     driver: local
+  nfs:
+    name: nfs-share
+    driver: local
+    driver_opts:
+      type: nfs
+      device: ":/nfs_share"
+      o: "addr=10.0.0.3,ro,soft,nfsvers=4"
+  duplicati-data:
+    name: duplicati-data
+    driver: local
+    driver_opts:
+      type: nfs
+      device: ":/nfs_share/services/duplicati"
+      o: "addr=10.0.0.3,rw,soft,nfsvers=4"
+
 
 configs:
   haproxy: