docker-compose.yml

# Single self-contained image: backend serves the API and the built SPA on port 8080.
# Copy .env.example to .env to override optional settings (e.g. scheduler time zone).
services:
  app:
    build:
      context: .
    image: ghcr.io/secretnest/azurestoragebackup:latest
    # A running backup is suspended (journal fsynced, resumable) on SIGTERM. Give it more room than
    # the app's own 30s shutdown timeout: whichever expires first wins, and docker's expiring first
    # means SIGKILL, which is exactly what loses the run.
    stop_grace_period: 45s
    ports:
      - "8080:8080"
    environment:
      # Cron time zone for scheduled tasks (IANA id).
      - Scheduler__TimeZone=${SCHEDULER_TIMEZONE:-UTC}
      # Block-IO priority for the whole process: Normal (default), Low, Idle. Applied before the app has a
      # second thread, so it covers the diff, the dedup probe, 7-Zip and the uploads alike. Only the BFQ
      # scheduler acts on it — see .env.example, and the line this writes to the startup log.
      - Backup__IoPriority=${BACKUP_IO_PRIORITY:-Normal}
    volumes:
      - app-data:/data      # SQLite database (persist)
      - app-keys:/keys      # Data Protection key ring (persist; losing it makes secrets undecryptable)
      - app-temp:/temp      # backup/restore working area (needs disk space)
      # Mount the host directories you want to back up / restore into, e.g.:
      # - /path/on/host:/backup-source:ro
      # - /path/on/host/restores:/restore-target
    restart: unless-stopped

volumes:
  app-data:
  app-keys:
  app-temp: