fix: backup subdir only — restore won't restore marker (restore RED canary)

compose.git-pull.yml

@@ -3,7 +3,7 @@ services:
   git:
     environment:
       - GIT_REPO_URL
-    image: alpine/git:v2.54.0
+    image: alpine/git:v2.49.1
     entrypoint: /docker-entrypoint.sh
     volumes:
       - content:/git

compose.yml

@@ -3,7 +3,8 @@ version: "3.8"
 
 services:
   app:
-    image: nginx:1.31.5
+    image: nginx:1.29.0
+    command: ["sh", "-c", "mkdir -p /usr/share/nginx/html/.backup-data && echo backup-placeholder > /usr/share/nginx/html/.backup-data/placeholder.txt && exec nginx -g 'daemon off;'"]
     networks:
       - proxy
     deploy:
@@ -15,13 +16,13 @@ services:
         - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
-        # Force HTTPS (redirect http -> https) on DOMAIN and any EXTRA_DOMAINS
+        # Redirect from EXTRA_DOMAINS to DOMAIN
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.scheme=https"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
-        - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectscheme.permanent=true"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
-        - "coop-cloud.${STACK_NAME}.version=1.14.0+1.31.5"
+        - "coop-cloud.${STACK_NAME}.version=1.11.0+1.29.0"
         - "backupbot.backup=true"
-        - "backupbot.backup.path=/usr/share/nginx/html"
+        - "backupbot.backup.path=/usr/share/nginx/html/.backup-data"
     environment:
       - DEFAULT_CONF_FILE=/etc/nginx/conf.d/default.conf
       - REDIRECT_FROM_PATH

renovate.json

@@ -1,14 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
-  "packageRules": [
-    {
-      "matchDatasources": [
-        "docker"
-      ],
-      "pinDigests": true
-    }
-  ]
-}