#########################
# Services
#########################
services:

  # -------------------------------------------------
  #  Borg repository (data only)
  # -------------------------------------------------
  borg:
    image: ghcr.io/borgbackup/borg:latest
    container_name: borg_repo
    restart: always
    command: ["sleep", "infinity"]               # keep container alive
    volumes:
      - ./repo:/var/borg/repo                    # persistent repo
      - ./ssh:/root/.ssh:ro                     # optional SSH keys (read‑only)
    environment:
      # Uncomment if you want the repo to be encrypted by default
      # BORG_PASSPHRASE: "${BORG_PASSPHRASE}"
    networks:
      - backup_net

  # -------------------------------------------------
  #  Borgmatic – scheduled backup runner
  # -------------------------------------------------
  borgmatic:
    image: ghcr.io/borgmatic-collective/borgmatic:latest
    container_name: borgmatic
    restart: always
    depends_on:
      - borg
    volumes:
      - ./repo:/var/borg/repo                    # same repo as above
      - ./ssh:/root/.ssh:ro                     # SSH keys (read‑only)
      - ./borgmatic/config.yaml:/etc/borgmatic/config.yaml:ro
      - ./borgmatic/source_dirs:/source_dirs:ro # directories to back up
    environment:
      - BORG_PASSPHRASE=${BORG_PASSPHRASE}
    # Run borgmatic every day at 02:30 am using the built‑in cron of the image
    command: ["cron", "-f"]
    # If you prefer a host‑side cron, replace the command with “tail -f /dev/null”
    # and schedule `docker exec borgmatic borgmatic run` from the host.
    networks:
      - backup_net

  # -------------------------------------------------
  #  BorgWeb – Flask UI for browsing the repo
  # -------------------------------------------------
  borgweb:
    image: ghcr.io/borgbackup/borgweb:latest
    container_name: borgweb
    restart: always
    depends_on:
      - borg
    environment:
      - BORGWEB_REPO=/var/borg/repo
      - BORG_PASSPHRASE=${BORG_PASSPHRASE}
      # Optional basic‑auth (handled by the tiny built‑in Flask auth)
      - BORGWEB_BASIC_AUTH_USER=${BORGWEB_BASIC_AUTH_USER}
      - BORGWEB_BASIC_AUTH_PASS=${BORGWEB_BASIC_AUTH_PASS}
    volumes:
      - ./repo:/var/borg/repo
    # Expose the UI directly; you can map it to any host port you like.
    # 8080 = plain HTTP (for testing only)
    # 8443 = HTTPS if you put an external TLS terminator in front.
    ports:
      - "48443:8080"
    networks:
      - backup_net

  # -------------------------------------------------
  #  OPTIONAL: Minimal NGINX reverse‑proxy for TLS & auth
  #  (If you already have a front‑end proxy you can skip this block)
  # -------------------------------------------------
  nginx:
    image: nginx:alpine
    container_name: nginx_tls
    restart: always
    depends_on:
      - borgweb
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf:ro
      # If you have your own cert/key files, mount them here:
      # - ./certs/fullchain.pem:/etc/ssl/certs/fullchain.pem:ro
      # - ./certs/privkey.pem:/etc/ssl/private/privkey.pem:ro
    ports:
      - "443:443"
    networks:
      - backup_net

Result breakdown

Overall score

This is entirely made up by ME, it's not an official metric, so please don't take it as gospel.

There's a lot of AI generated code here, it's getting dangerously close to be sloppy. The ratio of comment to code is over 20%, this automatically pushes the score to 100% Comment ratio The amount of comments in AI generated code is borderline ridiculous. Comments are good, too many (often redundant) comments are just bloat.

34 comments for 89 lines of code. That's a ratio of 38%. The site assumes something is 100% AI generated if the ratio goes above 20%.