version: "3.9"

networks:
  public:
    external: true

services:
  vaultwarden:
    image: vaultwarden/server
    container_name: vaultwarden
    restart: always
    volumes:
      - "./vaultwarden-data:/data"
    environment:
      - "WEBSOCKET_ENABLED=true"
      - "SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}"
      - "ADMIN_TOKEN=${ADMIN_TOKEN}"
      - "DOMAIN=https://${VAULTWARDEN_DOMAIN}"
    # ports:
    #   - "80:80"
    networks:
      - public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`${VAULTWARDEN_DOMAIN}`)"
      - "traefik.http.routers.vaultwarden.service=vaultwarden-service"
      - "traefik.http.services.vaultwarden-service.loadbalancer.server.port=80"
      - "traefik.http.routers.vaultwarden.tls=true"
      - "traefik.http.routers.vaultwarden.tls.certresolver=le"