From ede9c3684c8b5d50027a3891b0433c2b84ea702a Mon Sep 17 00:00:00 2001
From: Mauricio Siu <siumauricio@icloud.com>
Date: Wed, 8 Jul 2026 02:10:02 -0600
Subject: [PATCH] fix: align compose env vars with template.toml and allow
 external hostnames

The compose file referenced ${SERVICE_PASSWORD_ENCRYPT} and
${SERVICE_PASSWORD_WEB}, but template.toml defines the variables as
SETTINGS_ENCRYPTION_KEY and DUPLICATI__WEBSERVICE_PASSWORD, so both
values rendered empty at deploy time. Also removed the leftover
SERVICE_URL_DUPLICATI_8200 passthrough entry and added
DUPLICATI__WEBSERVICE_ALLOWED_HOSTNAMES=* so the Duplicati web server
(2.0.8+) accepts requests forwarded by Traefik for the configured
domain instead of rejecting unknown Host headers.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 blueprints/duplicati/docker-compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/blueprints/duplicati/docker-compose.yml b/blueprints/duplicati/docker-compose.yml
index 2a6df944..f41df088 100644
--- a/blueprints/duplicati/docker-compose.yml
+++ b/blueprints/duplicati/docker-compose.yml
@@ -4,12 +4,12 @@ services:
     image: 'lscr.io/linuxserver/duplicati:${APP_RELEASE:-2.3.0}'
     restart: unless-stopped
     environment:
-      - SERVICE_URL_DUPLICATI_8200
       - PUID=0
       - PGID=0
       - 'TZ=${TZ:-Europe/London}'
-      - 'SETTINGS_ENCRYPTION_KEY=${SERVICE_PASSWORD_ENCRYPT}'
-      - 'DUPLICATI__WEBSERVICE_PASSWORD=${SERVICE_PASSWORD_WEB}'
+      - 'SETTINGS_ENCRYPTION_KEY=${SETTINGS_ENCRYPTION_KEY}'
+      - 'DUPLICATI__WEBSERVICE_PASSWORD=${DUPLICATI__WEBSERVICE_PASSWORD}'
+      - 'DUPLICATI__WEBSERVICE_ALLOWED_HOSTNAMES=*'
     volumes:
       - 'duplicati-config:/config'
       - '../files/backups:/backups'