version: "3.8"

services:
  app:
    build: .
    environment:
      RESTIC_PASSWORD_FILE: "/run/secrets/restic_password"
      RESTIC_REPOSITORY:  "s3:http://172.20.0.2:9000/backup"  # https://restic.readthedocs.io/en/stable/030_preparing_a_new_repo.html
      AWS_ACCESS_KEY_ID: "root"
      AWS_SECRET_ACCESS_KEY: "foobar"
    secrets:
      - restic_password
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

secrets:
  restic_password:
    #external: true
    #name: restic_password
    file: restic_password