services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped

    environment:
      DOMAIN: ${DOMAIN}
      TZ: ${TZ}
      WEBSOCKET_ENABLED: "true"
      SIGNUPS_ALLOWED: "false"
      ADMIN_TOKEN: "${ADMIN_TOKEN}"
      LOG_FILE: "/data/vaultwarden.log"
      LOG_LEVEL: "info"

    volumes:
      - ./vw-data:/data

    networks:
      - traefik_default

    labels:
      - "traefik.enable=true"

      # MAIN HTTPS ROUTER
      - "traefik.http.routers.vaultwarden.rule=Host(`vaultwarden.rozic-dev.com`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls=true"
      - "traefik.http.routers.vaultwarden.tls.certresolver=letsencrypt"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"
      - "traefik.docker.network=traefik_default"

networks:
  traefik_default:
    external: true