{
  "schemaVersion": 2,
  "services": [
    {
      "name": "kopia",
      "image": "kopia/kopia:latest",
      "command": [
        "server",
        "start",
        "--disable-csrf-token-checks",
        "--tls-cert-file=/app/certs/my.cert",
        "--tls-key-file=/app/certs/my.key",
        "--address=0.0.0.0:51515",
        "--server-username=${USER}",
        "--server-password=${PASSWORD}"
      ],
      "environment": [
        {
          "key": "KOPIA_PASSWORD",
          "value": "${PASSWORD}"
        },
        {
          "key": "KOPIA_SERVER_FINGERPRINT",
          "value": "${KOPIA_SERVER_FINGERPRINT}"
        },
        {
          "key": "TZ",
          "value": "${TZ}"
        },
        {
          "key": "USER",
          "value": "${USER}"
        }
      ],
      "addPorts": [
	      {"containerPort":51515,
		      "hostPort":"$APP_PORT",
		      "tcp":true,
		      "udp":false}
      ],
      "volumes": [
        {
          "hostPath": "${APP_DATA_DIR}/certs",
          "containerPath": "/app/certs",
          "readOnly": false,
          "shared": false,
          "private": false
        },
        {
          "hostPath": "${APP_DATA_DIR}/config",
          "containerPath": "/app/config",
          "readOnly": false,
          "shared": false,
          "private": false
        },
        {
          "hostPath": "${APP_DATA_DIR}/cache",
          "containerPath": "/app/cache",
          "readOnly": false,
          "shared": false,
          "private": false
        },
        {
          "hostPath": "${APP_DATA_DIR}/logs",
          "containerPath": "/app/logs",
          "readOnly": false,
          "shared": false,
          "private": false
        }
      ],
      "hostname": "kopia-server",
      "devices": [
        "/dev/fuse:/dev/fuse:rwm"
      ],
      "privileged": true,
      "capAdd": [
        "SYS_ADMIN"
      ],
      "securityOpt": [
        "apparmor:unconfined"
      ]
    }
  ]
}