infrastructure/caddy/env/caddy_backup.env

@@ -1,14 +1,9 @@
 #RUN_ON_STARTUP=true
+BACKUP_CRON=*/30 * * * *
 RESTIC_REPOSITORY=/mnt/restic
 RESTIC_BACKUP_SOURCES=/data
 RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
-# Backup (exuclusive with Check and Prune)
-BACKUP_CRON=*/30 * * * *
 RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
 #RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
-# Check (exuclusive with Check and Prune)
-#CHECK_CRON=*/30 * * * *
-#RESTIC_CHECK_ARGS=--read-data-subset=40%
-# Prune (exuclusive with Check and Prune)
-#PRUNE_CRON=*/30 * * * *
-#RESTIC_PRUNE_ARGS=
+#RESTIC_PRUNE_ARGS=
+RESTIC_CHECK_ARGS=--read-data-subset=20%

infrastructure/main/docker-compose.main.yml

@@ -1,20 +1,17 @@
 services:
   main_infrastructure:
     container_name: main_infrastructure
-    image: alpine:latest
+    image: debian:latest
     profiles:
       - main_infrastructure
+    user: "root"
+    group_add:
+      - '${PUID:-1000}'
     volumes:
       - public_data:/public
       - private_data:/private
-    read_only: true
-    security_opt:
-      - no-new-privileges:true
-    cap_drop:
-      - ALL
-    cap_add:
-      - CHOWN
-      - DAC_OVERRIDE
+    networks:
+      - infra-network
     # Fix root permissions on mounted volumes
     command: chown -R ${PUID:-1000}:${PGID:-1000} /public /private
 

infrastructure/wordpress/env/wordpress_backup.env

@@ -1,14 +1,9 @@
 #RUN_ON_STARTUP=true
+BACKUP_CRON=*/30 * * * *
 RESTIC_REPOSITORY=/mnt/restic
 RESTIC_BACKUP_SOURCES=/data
 RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
-# Backup (exuclusive with Check and Prune)
-BACKUP_CRON=*/30 * * * *
 RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
 RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
-# Check (exuclusive with Check and Prune)
-#CHECK_CRON=*/30 * * * *
-#RESTIC_CHECK_ARGS=--read-data-subset=40%
-# Prune (exuclusive with Check and Prune)
-#PRUNE_CRON=*/30 * * * *
-#RESTIC_PRUNE_ARGS=
+#RESTIC_PRUNE_ARGS=
+RESTIC_CHECK_ARGS=--read-data-subset=20%