Docker-Compose/Security_Containers/vaultwarden/compose.yaml

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      - DOMAIN=https://${SERVICE_NAME}.${DOMAIN_NAME}
      #- ADMIN_TOKEN=${ADMIN_TOKEN}
      - WEBSOCKET_ENABLED=true
      - SIGNUPS_ALLOWED=false
      #- SMTP_HOST=smtp.example.com
      #- SMTP_FROM=email@example.com
      #- SMTP_FROM_NAME=Vaultwarden
      #- SMTP_SECURITY=SECURITYMETHOD
      #- SMTP_PORT=XXXX
      #- SMTP_USERNAME=email@example.com
      #- SMTP_PASSWORD=YourReallyStrongPasswordHere
      #- SMTP_AUTH_MECHANISM="Mechanism"
    volumes:
      - /srv/docker/vaultwarden/vw-data/:/data/
    ports:
      - 9445:80
    networks:
      - traefik_network
    labels:
      - flame.type=application # "app" works too
      - flame.name=${SERVICE_NAME}
      - flame.url=https://${SERVICE_NAME}.${DOMAIN_NAME}
      - flame.icon=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/vaultwarden-light.svg
      ### Enable Traefik
      - traefik.enable=true
      ### For HTTP
      #- traefik.http.routers.${SERVICE_NAME}.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      #- traefik.http.routers.${SERVICE_NAME}.entrypoints=web
      ### For HTTPS
      - traefik.http.routers.${SERVICE_NAME}-https.tls=true
      - traefik.http.routers.${SERVICE_NAME}-https.tls.certresolver=cloudflare
      - traefik.http.routers.${SERVICE_NAME}-https.entrypoints=websecure
      - traefik.http.routers.${SERVICE_NAME}-https.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      - traefik.http.services.${SERVICE_NAME}-https.loadbalancer.server.port=80"
      - traefik.http.routers.${SERVICE_NAME}.middlewares=vaultwarden-add-slash,vaultwarden-strip-prefix"
      - traefik.http.middlewares.${SERVICE_NAME}-add-slash.redirectregex.regex=/vaultwarden$$"
      - traefik.http.middlewares.${SERVICE_NAME}-add-slash.redirectregex.replacement=/vaultwarden/"
      - traefik.http.middlewares.${SERVICE_NAME}-strip-prefix.stripprefix.prefixes=/vaultwarden"
networks:
  traefik_network:
    external: true