# Reference deployment for the restic-manager control plane.
# Mirrors spec.md §10.1. Adjust image tag and RM_BASE_URL for your env.
services:
  restic-manager:
    image: ghcr.io/dcglab/restic-manager:latest
    restart: unless-stopped
    ports:
      - "8443:8443"
    volumes:
      - ./data:/data
      - ./certs:/certs:ro
    environment:
      - RM_DATA_DIR=/data
      - RM_LISTEN=:8443
      - RM_BASE_URL=https://restic.lab.example
      - RM_TLS_CERT=/certs/fullchain.pem
      - RM_TLS_KEY=/certs/privkey.pem
      - RM_SECRET_KEY_FILE=/data/secret.key