services:
  vaultwarden:
    image: {{ vaultwarden_image }}
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      ADMIN_TOKEN: {{ vaultwarden_admin_token }}
      SIGNUPS_ALLOWED: "{{ vaultwarden_signups_allowed | lower }}"
      DOMAIN: "https://{{ vaultwarden_host }}"
      WEBSOCKET_ENABLED: "true"
    volumes:
      - {{ vaultwarden_data_dir }}:/data
    labels:
      traefik.enable: "true"
      traefik.http.routers.vaultwarden.rule: "Host(`{{ vaultwarden_host }}`)"
      traefik.http.routers.vaultwarden.entrypoints: websecure
      traefik.http.routers.vaultwarden.tls.certresolver: letsencrypt
      traefik.http.services.vaultwarden.loadbalancer.server.port: "80"
    networks:
      - {{ docker_network_name }}

networks:
  {{ docker_network_name }}:
    external: true