garage-synology-docker-compose.yaml

# This is my Docker Compose file to run Garage inside a Synology NAS.
# I will write a full blog post about this, eventually. Probably after I finish testing.
#
# The proxy, and CA TLS configuration is describe in this blog post:
# https://mteixeira.wordpress.com/2024/04/12/proxying-apps-behind-caddy-with-certs-from-private-ca-using-home-assistant-as-example/

services:
  caddy:
    image: lucaslorentz/caddy-docker-proxy:2.10.0
    container_name: caddy
    ports:
      - 80:80
      - 443:443
    labels:
      caddy: (stepca)
      caddy.tls: <your-email>
      caddy.tls.ca: https://<ca-hostname>:9000/acme/acme/directory
      caddy.tls.ca_root: /data/caddy/pki/<your-ca>.crt
    volumes:
      - ./caddy_data:/data
      - /var/run/docker.sock:/var/run/docker.sock
      - ./homelab-ca.crt:/data/caddy/pki/homelab-ca.crt
    restart: unless-stopped

  garage:
      image: dxflrs/garage:v2.1.0
      container_name: garage
      labels:
        caddy_0: garage-s3.<your-tld>
        caddy_0.import: stepca
        caddy_0.reverse_proxy: "* {{upstreams 3900}}"
        caddy_0.reverse_proxy.health_uri: /health
        caddy_0.reverse_proxy.health_port: 3903
        caddy_1: garage-admin.<your-tld>
        caddy_1.import: stepca
        caddy_1.reverse_proxy: "* {{upstreams 3903}}"
        caddy_1.reverse_proxy.health_uri: /health
        caddy_1.reverse_proxy.health_port: 3903
      environment:
        - RUST_LOG=garage=info
        - TZ=America/New_York
      # ports:
      #   - '3900:3900'  # s3 api
      #   - '3901:3901'  # rpc bind
      #   - '3902:3902'  # s3 web
      #   - '3903:3903'  # k2v api: serves /metrics
      #   - '3904:3904'  # admin
      restart: unless-stopped
      stop_grace_period: 2m
      user: '1026:100'
      volumes:
        - /volume1/docker/garage/garage.toml:/etc/garage.toml
        - /volume1/docker/garage/meta:/var/lib/garage/meta
        - /volume1/docker/garage/data:/var/lib/garage/data