version: '3'
services:
  borg:
    container_name: borg-restore

    cap_add:
      - SYS_ADMIN

    security_opt:
      - apparmor:unconfined
      - label:disable

    devices:
      - /dev/fuse:/dev/fuse

    command: /bin/sh