add restore-cli container, to restore from backups; update compose file to 2024.12 requirements;

docker-compose.prod.yml

@@ -64,8 +64,10 @@ services:
     env_file:
       - .env
     depends_on:
-      - postgresql
-      - redis
+      postgresql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
     networks:
       - backend
       - frontend
@@ -96,8 +98,10 @@ services:
     env_file:
       - .env
     depends_on:
-      - postgresql
-      - redis
+      postgresql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
     networks:
       - backend
 
@@ -188,6 +192,23 @@ services:
     volumes:
       - ./data/restic/ssh/:/run/secrets/.ssh:ro
 
+  restore-cli:
+    image: registry.git.base23.de/base23/backup/resticker:0.17.0
+    entrypoint: /entrypoint-restore
+    environment:
+      RESTIC_REPOSITORY: sftp://${RESTIC_REPO_USER:?Restic repository user is required}@${RESTIC_REPO_ADDRESS:?Restic repository address is requried}:${RESTIC_REPO_PORT:?Restic repository port is required}//backup
+      RESTIC_PASSWORD: '${RESTIC_REPO_PASSWORD:?Restic repository password is required}'
+      TZ: Europe/Berlin
+    volumes:
+      - ./data/restic/ssh/:/run/secrets/.ssh:ro
+      - ./docker-compose.yml:/compose-project/docker-compose.yml:ro
+      - ./.env:/compose-project/.env:ro
+      - backups_db:/var/lib/postgresql/backups:rw
+      - ./data/authentik/certs:/var/lib/authentik/backups/certs:rw
+      - ./data/authentik/custom-templates:/var/lib/authentik/backups/templates:rw
+      - ./data/authentik/media:/var/lib/authentik/backups/media:rw
+      - ./data/.lego:/var/lib/lego/backups:rw
+
 
 volumes:
   backups_db: