services:
  rest-server:
    image: restic/rest-server
    restart: unless-stopped
    ports:
      - "8000:8000"
    volumes:
      - /mnt/restic:/data
      - ./certs:/certs:ro
    environment:
      - OPTIONS=--tls --tls-cert /certs/foo.crt --tls-key /certs/foo.key