services:
  rest-server:
    image: restic/rest-server
    container_name: restic
    restart: unless-stopped
    volumes:
      - /mnt/restic:/data
    environment:
      OPTIONS: --no-auth

  envoy:
    image: envoyproxy/envoy:v1.33-latest
    user: root
    container_name: envoy
    restart: unless-stopped
    ports:
      - "443:10000"
    volumes:
      - ./envoy.yaml:/etc/envoy/envoy.yaml:ro
      - ./access.log:/var/log/envoy/access.log
      - /var/lib/tls:/certs
    depends_on:
      - rest-server