paperless: Add restic backups

roles/paperless/defaults/main.yaml

@@ -7,6 +7,9 @@ stack_paperless_tz: "{{ timezone | default('America/Chicago') }}"
 stack_paperless_puid: "{{ puid | default(1000) }}"
 stack_paperless_pgid: "{{ pgid | default(100) }}"
 
+stack_paperless_restic_enable: true
+stack_paperless_restic_cron: 0 0 2 * * *
+
 stack_paperless_env_dir: /opt/stack_paperless
 stack_paperless_serve_dir: /srv
 stack_paperless_serve_dir_create: true

roles/paperless/templates/docker-compose.yaml.j2

@@ -65,6 +65,24 @@ services:
     environment:
       REDIS_ARGS: "--save 60 10"
 
+{% if restic_enable is not undefined and not false and stack_paperless_restic_enable is not undefined and not false %}
+  backup:
+    image: mazzolino/restic
+    environment:
+      TZ: "{{ restic_tz }}"
+      BACKUP_CRON: "{{ stack_paperless_restic_cron }}"
+      RESTIC_REPOSITORY: "{{ restic_repo }}"
+      RESTIC_PASSWORD: "{{ restic_pass }}"
+      AWS_ACCESS_KEY_ID: "{{ restic_s3_key }}"
+      AWS_SECRET_ACCESS_KEY: "{{ restic_s3_secret }}"
+      RESTIC_BACKUP_ARGS: >-
+        --tag paperless
+      RESTIC_BACKUP_SOURCES: "/backup"
+    volumes:
+      - "{{ stack_paperless_env_dir }}:/backup/{{ stack_paperless_env_dir }}"
+      - "{{ stack_paperless_serve_dir }}/documents:/backup/{{ stack_paperless_serve_dir }}/documents"
+{% endif %}
+
 networks:
   caddy:
     external: true