[Unit]
Description=Backrest
After=network.target docker.service

[Service]
Type=simple
User=backups
ExecStart=/usr/local/bin/backrest
WorkingDirectory=/home/backups/backrest
# wrap with caddy reverse proxy
Environment="BACKREST_PORT=172.17.0.1:9898"
AmbientCapabilities=CAP_DAC_READ_SEARCH
CapabilityBoundingSet=CAP_DAC_READ_SEARCH

[Install]
WantedBy=multi-user.target