From 79d53f793a4ff233e84f2e2885d0fdf5c8267b83 Mon Sep 17 00:00:00 2001
From: PorridgePi <kunbao2006@126.com>
Date: Wed, 21 Sep 2022 11:24:48 +0100
Subject: [PATCH] vaultwarden: Initial commit

---
 vaultwarden/.env.example       |  3 +++
 vaultwarden/docker-compose.yml | 29 +++++++++++++++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 vaultwarden/.env.example
 create mode 100644 vaultwarden/docker-compose.yml

diff --git a/vaultwarden/.env.example b/vaultwarden/.env.example
new file mode 100644
index 0000000..771cd6e
--- /dev/null
+++ b/vaultwarden/.env.example
@@ -0,0 +1,3 @@
+SIGNUPS_ALLOWED=false # set to true to allow signups
+VAULTWARDEN_DOMAIN=domain_goes_here
+ADMIN_TOKEN=token_goes_here
diff --git a/vaultwarden/docker-compose.yml b/vaultwarden/docker-compose.yml
new file mode 100644
index 0000000..3b23b2d
--- /dev/null
+++ b/vaultwarden/docker-compose.yml
@@ -0,0 +1,29 @@
+version: "3.9"
+
+networks:
+  public:
+    external: true
+
+services:
+  vaultwarden:
+    image: vaultwarden/server
+    container_name: vaultwarden
+    restart: always
+    volumes:
+      - "./vaultwarden-data:/data"
+    environment:
+      - "WEBSOCKET_ENABLED=true"
+      - "SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}"
+      - "ADMIN_TOKEN=${ADMIN_TOKEN}"
+      - "DOMAIN=https://${VAULTWARDEN_DOMAIN}"
+    # ports:
+    #   - "80:80"
+    networks:
+      - public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.vaultwarden.rule=Host(`${VAULTWARDEN_DOMAIN}`)"
+      - "traefik.http.routers.vaultwarden.service=vaultwarden-service"
+      - "traefik.http.services.vaultwarden-service.loadbalancer.server.port=80"
+      - "traefik.http.routers.vaultwarden.tls=true"
+      - "traefik.http.routers.vaultwarden.tls.certresolver=le"