secrets:
  B2_APPLICATION_KEY:
    file: ../secrets/backup/duplicity/B2_APPLICATION_KEY
  B2_APPLICATION_KEY_ID:
    file: ../secrets/backup/duplicity/B2_APPLICATION_KEY_ID
  BUCKET_NAME:
    file: ../secrets/backup/duplicity/BUCKET_NAME
  PASSPHRASE:
    file: ../secrets/backup/duplicity/PASSPHRASE

services:
  backup:
    image: ghcr.io/tecnativa/docker-duplicity:3.3.1
    restart: unless-stopped
    depends_on: 
      generate-secrets:
        condition: 'service_completed_successfully'
    secrets: [B2_APPLICATION_KEY, B2_APPLICATION_KEY_ID, BUCKET_NAME, PASSPHRASE]
    environment:
      HOSTNAME: ${DOMAIN}
      TZ: America/New_York
    volumes:
      - ./backup/backup-files:/backup-files:ro
    entrypoint: ["/bin/sh", "/backup-files"]

  generate-secrets:
    volumes:
      - ../secrets/backup/duplicity/BUCKET_NAME:/secrets/backup/duplicity/BUCKET_NAME
      - ../secrets/backup/duplicity/PASSPHRASE:/secrets/backup/duplicity/PASSPHRASE


#  duplicity-postgres:
#    image: tecnativa/docker-duplicity-postgres:latest
#    restart: unless-stopped
#    depends_on: [secrets]
#    secrets: [B2_APPLICATION_KEY, B2_APPLICATION_KEY_ID, BUCKET_NAME, PASSPHRASE]
#    environment:
#      HOSTNAME: ${DOMAIN}
#      TZ: America/New_York
#    volumes:
#      - ./backup/backup-databases:/backup-databases:ro
#    entrypoint: ["/bin/sh", "/backup-databases"]