networks:
  default:
    enable_ipv6: true

volumes:
  vaultwarden:
    driver: local

services:
  vaultwarden:
    image: vaultwarden/server:1.32.2
    container_name: vaultwarden
    environment:
      - WEBSOCKET_ENABLED=true # Enable WebSocket notifications.
      - SIGNUPS_ALLOWED=true
      - SMTP_HOST=${SMTP_HOST}
      - SMTP_FROM=${SMTP_USER}
      - SMTP_PORT=587
      - SMTP_USERNAME=${SMTP_USER}
      - SMTP_PASSWORD=${SMTP_PASS}
      - DOMAIN=https://pass.gnous.eu
      - LOG_FILE=/data/vaultwarden.log
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.entryPoints=websecure"
      - "traefik.http.routers.vaultwarden.rule=Host(`pass.gnous.eu`)"
      - "traefik.http.routers.vaultwarden.tls=true"
      - "traefik.http.routers.vaultwarden.tls.certresolver=defaultacme"
      - "traefik.http.routers.vaultwarden.middlewares=proxyHeader@file,proxyError@file"
    restart: always
    volumes:
      - vaultwarden:/data
    ports:
      - "4005:80"