diff --git a/backup.sh b/backup.sh
new file mode 100755
index 0000000..2a70e24
--- /dev/null
+++ b/backup.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+source /home/iboaz/.restic.sh
+
+exec > >(logger -t backup) 2>&1
+
+/usr/bin/restic backup -o s3.storage-class=INTELLIGENT_TIERING --exclude-file=/home/iboaz/excludes.txt --one-file-system --verbose /
+/usr/bin/restic -r /mnt/usb/backups/ backup --exclude-file=/home/iboaz/excludes.txt --one-file-system --verbose /
+/usr/bin/restic forget --keep-last 1 --keep-daily 3 --keep-weekly 4 --keep-monthly 3 --keep-yearly 3 --prune
+/usr/bin/restic -r /mnt/usb/backups/ forget --keep-last 1 --keep-daily 7 --keep-weekly 8 --keep-monthly 3 --keep-yearly 3 --prune
diff --git a/cf-dns/docker-compose.yml b/cf-dns/docker-compose.yml
new file mode 100644
index 0000000..2f4ec13
--- /dev/null
+++ b/cf-dns/docker-compose.yml
@@ -0,0 +1,38 @@
+version: "3"
+services:
+   cf-public:
+     image: favonia/cloudflare-ddns:latest
+     network_mode: host
+     restart: always
+     cap_add:
+       - SETUID
+       - SETGID
+     cap_drop:
+       - all
+     read_only: true
+     security_opt:
+       - no-new-privileges:true
+     environment:
+       - PUID=1000
+       - PGID=1000
+       - CF_API_TOKEN=${CF_API_TOKEN}
+       - DOMAINS=*.code.msws.xyz
+       - PROXIED=false
+# cf-internal:
+#   image: favonia/cloudflare-ddns:latest
+#    network_mode: host
+#    restart: always
+#    cap_add:
+#      - SETUID
+#      - SETGID
+#    cap_drop:
+#      - all
+#    read_only: true
+#    security_opt:
+#      - no-new-privileges:true
+#    environment:
+#      PUID: 1000
+#      PGID: 1000
+#      CF_API_TOKEN: ${CF_API_TOKEN}
+#      DOMAINS: "go.msws.xyz"
+#      PROXIED: "true"
diff --git a/disabled/cf-dns/docker-compose.yml b/disabled/cf-dns/docker-compose.yml
deleted file mode 100644
index c37dd56..0000000
--- a/disabled/cf-dns/docker-compose.yml
+++ /dev/null
@@ -1,38 +0,0 @@
-version: "3"
-services:
-  #  cf-public:
-  #    image: favonia/cloudflare-ddns:latest
-  #    network_mode: host
-  #    restart: always
-  #    cap_add:
-  #      - SETUID
-  #      - SETGID
-  #    cap_drop:
-  #      - all
-  #    read_only: true
-  #    security_opt:
-  #      - no-new-privileges:true
-  #    environment:
-  #      - PUID=1000
-  #      - PGID=1000
-  #      - CF_API_TOKEN=${CF_API_TOKEN}
-  #      - DOMAINS=*.code.msws.xyz
-  #      - PROXIED=false
-  cf-internal:
-    image: favonia/cloudflare-ddns:latest
-    network_mode: host
-    restart: always
-    cap_add:
-      - SETUID
-      - SETGID
-    cap_drop:
-      - all
-    read_only: true
-    security_opt:
-      - no-new-privileges:true
-    environment:
-      PUID: 1000
-      PGID: 1000
-      CF_API_TOKEN: ${CF_API_TOKEN}
-      DOMAINS: "go.msws.xyz"
-      PROXIED: "true"
diff --git a/excludes.txt b/excludes.txt
new file mode 100644
index 0000000..60478d3
--- /dev/null
+++ b/excludes.txt
@@ -0,0 +1,13 @@
+/home/iboaz/jellyfin/media
+/proc
+/sys
+/tmp
+/var/tmp
+/var/cache
+/var/log
+/dev
+/mnt
+/media
+/lost+found
+node_modules
+__pycache__