infrastructure/ansible/roles/db_auto_backup/files/docker-compose.yml

services:
  backup:
    image: ghcr.io/realorangeone/db-auto-backup:latest
    restart: unless-stopped
    volumes:
      - "{{ db_backups_dir }}:/var/backups"
    environment:
      - DOCKER_HOST=tcp://docker_proxy:2375
      - HEALTHCHECKS_ID={{ vault_db_auto_backup_healthchecks_id }}
    depends_on:
      - docker_proxy
    networks:
      - default
      - backup_private

  docker_proxy:
    image: lscr.io/linuxserver/socket-proxy:latest
    restart: unless-stopped
    environment:
      - POST=1
      - CONTAINERS=1
      - IMAGES=1
      - EXEC=1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - backup_private
    tmpfs:
      - /run
    logging:
      driver: none

networks:
  backup_private:
    internal: true