services:
  # NPM – Nginx Proxy Manager
  npm:
    image: jc21/nginx-proxy-manager:latest
    container_name: npm
    restart: unless-stopped
    networks:
      - frontend
      - backend
    ports:
      - "7602:80"     # HTTP
      - "7601:443"    # HTTPS
      - "7603:81"     # Interface admin
    volumes:
      - /srv/docker/infra/data/npm:/data
      - /srv/docker/infra/logs/npm:/var/log/npm
      - /srv/docker/infra/conf/npm:/etc/npm
      - /srv/docker/infra/data/npm/letsencrypt:/etc/letsencrypt   # certifs persistants

  # Duplicati – sauvegardes

  duplicati:
    image: lscr.io/linuxserver/duplicati:latest
    container_name: duplicati
    restart: unless-stopped
    networks:
      - backend
      - frontend
    ports:
      - "7604:8200"
    volumes:
      - /srv/docker/infra/data/duplicati:/data
      - /srv/docker/infra/logs/duplicati:/var/log/duplicati
      - /srv/docker/infra/conf/duplicati:/config
      - /srv/docker:/source/docker
      - /opt/backup:/source/scripts
      - /mnt/backup_syno/scripts/:/backups/scripts
      - /mnt/backup_syno/containers/:/backups/docker
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - SETTINGS_ENCRYPTION_KEY=Th2Z44cNA&28M#J&4g3wr73L9#ZG74f6@*tkdi
      #- CLI_ARGS= #optional
      - DUPLICATI__WEBSERVICE_PASSWORD=qTDKdabUESnxAg4XfU

  # Redis – cache / file queue
  redis:
    image: redis:7
    container_name: redis
    restart: unless-stopped
    networks:
      - backend
    volumes:
      - /srv/docker/infra/data/redis:/data
    ports:
      - "6379:6379"

networks:
  frontend:
    external: true
  backend:
    external: true