services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    volumes:
      - vaultwarden_data:/data
    networks:
      - traefik
    environment:
      - DOMAIN=https://vault.lan.krilio.net
      - SIGNUPS_ALLOWED=true
      - ADMIN_TOKEN=Ug0dkL40tGjqHvq1rbM0iFP44DjmV3zuhA08jkOy4MJlRmHQW6BkpPeVfsLJ87bu
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`vault.lan.krilio.net`)"
      - "traefik.http.routers.vaultwarden.tls.certresolver=cloudflare"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"

volumes:
  vaultwarden_data:

networks:
  traefik:
    external: true