docker-borgmatic/docker-compose.restore.yml

version: '3'
services:
  borgmatic:
    container_name: borg-restore

    cap_add:
      - SYS_ADMIN

    volumes:
      - /host/mount/location:/restore

    security_opt:
      - apparmor:unconfined
      - label:disable

    devices:
      - /dev/fuse:/dev/fuse

    command: /bin/sh