Update backup

Signed-off-by: Bensuperpc <bensuperpc@gmail.com>

infrastructure/caddy/env/caddy_backup.env

@@ -1,9 +1,14 @@
 #RUN_ON_STARTUP=true
-BACKUP_CRON=*/30 * * * *
 RESTIC_REPOSITORY=/mnt/restic
 RESTIC_BACKUP_SOURCES=/data
 RESTIC_PASSWORD=YFQh8v3Wi95v0p6h88D4u8C8z4gLfdMw
+# Backup (exuclusive with Check and Prune)
+BACKUP_CRON=*/30 * * * *
 RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
 #RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
-#RESTIC_PRUNE_ARGS=
-RESTIC_CHECK_ARGS=--read-data-subset=20%
+# Check (exuclusive with Check and Prune)
+#CHECK_CRON=*/30 * * * *
+#RESTIC_CHECK_ARGS=--read-data-subset=40%
+# Prune (exuclusive with Check and Prune)
+#PRUNE_CRON=*/30 * * * *
+#RESTIC_PRUNE_ARGS=

infrastructure/main/docker-compose.main.yml

@@ -1,17 +1,20 @@
 services:
   main_infrastructure:
     container_name: main_infrastructure
-    image: debian:latest
+    image: alpine:latest
     profiles:
       - main_infrastructure
-    user: "root"
-    group_add:
-      - '${PUID:-1000}'
     volumes:
       - public_data:/public
       - private_data:/private
-    networks:
-      - infra-network
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
     # Fix root permissions on mounted volumes
     command: chown -R ${PUID:-1000}:${PGID:-1000} /public /private
 

infrastructure/wordpress/env/wordpress_backup.env

@@ -1,9 +1,14 @@
 #RUN_ON_STARTUP=true
-BACKUP_CRON=*/30 * * * *
 RESTIC_REPOSITORY=/mnt/restic
 RESTIC_BACKUP_SOURCES=/data
 RESTIC_PASSWORD=7L1Ncbquax0B2TCOmrjaQl9n5mnY88bQ
+# Backup (exuclusive with Check and Prune)
+BACKUP_CRON=*/30 * * * *
 RESTIC_BACKUP_ARGS=--tag docker-volumes --verbose
 RESTIC_FORGET_ARGS=--prune --keep-last 8 --keep-daily 7 --keep-weekly 5 --keep-monthly 12 --keep-yearly 4
-#RESTIC_PRUNE_ARGS=
-RESTIC_CHECK_ARGS=--read-data-subset=20%
+# Check (exuclusive with Check and Prune)
+#CHECK_CRON=*/30 * * * *
+#RESTIC_CHECK_ARGS=--read-data-subset=40%
+# Prune (exuclusive with Check and Prune)
+#PRUNE_CRON=*/30 * * * *
+#RESTIC_PRUNE_ARGS=