ansible/roles/docker/templates/gotosocial-compose.yml.j2

services:
  gotosocial:
    image: superseriousbusiness/gotosocial:0.17.0-rc1
    container_name: gotosocial
    user: 1000:1000
    extra_hosts:
      - 'auth.thesatelliteoflove.com:172.20.0.3'
    environment:
      GTS_HOST: social.thesatelliteoflove.com
      GTS_DB_TYPE: sqlite
      GTS_DB_ADDRESS: /gotosocial/storage/sqlite.db
      GTS_LETSENCRYPT_ENABLED: "false"
      GTS_LETSENCRYPT_EMAIL_ADDRESS: ""
      GTS_TRUSTED_PROXIES: "172.20.0.3"
      GTS_ACCOUNT_DOMAIN: thesatelliteoflove.com
      GTS_OIDC_ENABLED: "true"
      GTS_OIDC_IDP_NAME: "Authentik"
      GTS_OIDC_ISSUER: https://auth.thesatelliteoflove.com/application/o/gotosocial/
      GTS_OIDC_CLIENT_ID: {{ gts_oidc_client_id }}
      GTS_OIDC_CLIENT_SECRET: {{ gts_oidc_client_secret }}
      GTS_OIDC_LINK_EXISTING: "true"
      TZ: UTC
    volumes:
      - gotosocial:/gotosocial/storage
    restart: "always"
    labels:
      - docker-volume-backup.stop-during-backup=true
    
  backup:
    image: offen/docker-volume-backup:v2
    restart: always
    environment:
      BACKUP_FILENAME: backup-%Y-%m-%dT%H-%M-%S.tar.gz
      BACKUP_LATEST_SYMLINK: backup-latest.tar.gz
      BACKUP_CRON_EXPRESSION: "0 9 * * *"
      BACKUP_PRUNING_PREFIX: backup-
      BACKUP_RETENTION_DAYS: 1
    volumes:
      - gotosocial:/backup/my-app-backup:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./backup:/archive

volumes:
  gotosocial:
    driver: local

networks:
  default:
    external: true
    name: lava