Files
stacks/vaultwarden/compose.yml

40 lines
1.5 KiB
YAML
Raw Normal View History

---
services:
vaultwarden:
image: vaultwarden/server:latest
container_name: vaultwarden
environment:
TZ: ${TIMEZONE:-Europe/Amsterdam}
DOMAIN: https://${TRAEFIK_HOST}
WEBSOCKET_ENABLED: "true"
SIGNUPS_ALLOWED: "true"
INVITATIONS_ALLOWED: "true"
SHOW_PASSWORD_HINT: "false"
SMTP_HOST: mailpit
SMTP_FROM: ${SMTP_FROM}
SMTP_FROM_NAME: Vaultwarden
SMTP_SECURITY: off
SMTP_PORT: 1025
volumes:
- ../.data/vaultwarden:/data
restart: always
labels:
- "traefik.enable=true"
- "traefik.http.middlewares.vaultwarden-redirect-web-secure.redirectscheme.scheme=https"
- "traefik.http.routers.vaultwarden-web.middlewares=vaultwarden-redirect-web-secure"
- "traefik.http.routers.vaultwarden-web.rule=Host(`${TRAEFIK_HOST}`)"
- "traefik.http.routers.vaultwarden-web.entrypoints=web"
- "traefik.http.routers.vaultwarden-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
- "traefik.http.routers.vaultwarden-web-secure.tls.certresolver=resolver"
- "traefik.http.routers.vaultwarden-web-secure.entrypoints=web-secure"
- "traefik.http.routers.vaultwarden-web-secure.middlewares=security-headers@file"
- "traefik.http.services.vaultwarden-web-secure.loadbalancer.server.port=80"
- "traefik.docker.network=${NETWORK_NAME}"
- "com.centurylinklabs.watchtower.enable=true"
networks:
- compose_network
networks:
compose_network:
name: ${NETWORK_NAME}
external: true