services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      - DOMAIN=https://${SERVICE_NAME}.${DOMAIN_NAME}
      #- ADMIN_TOKEN=${ADMIN_TOKEN}
      - WEBSOCKET_ENABLED=true
      - SIGNUPS_ALLOWED=false
      #- SMTP_HOST=smtp.example.com
      #- SMTP_FROM=email@example.com
      #- SMTP_FROM_NAME=Vaultwarden
      #- SMTP_SECURITY=SECURITYMETHOD
      #- SMTP_PORT=XXXX
      #- SMTP_USERNAME=email@example.com
      #- SMTP_PASSWORD=YourReallyStrongPasswordHere
      #- SMTP_AUTH_MECHANISM="Mechanism"
    volumes:
      - /srv/docker/vaultwarden/vw-data/:/data/
    ports:
      - 9445:80
    networks:
      - traefik_network
    labels:
      ### Auto create icon on Flame dashboard
      - flame.type=application
      - flame.name=${SERVICE_NAME}
      - flame.url=https://${SERVICE_NAME}.${DOMAIN_NAME}
      - flame.icon=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/vaultwarden-light.svg
      ### Enable Traefik
      - traefik.enable=true
      - traefik.docker.network=traefik_network
      ### For HTTP
      #- traefik.http.routers.${SERVICE_NAME}.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      #- traefik.http.routers.${SERVICE_NAME}.entrypoints=web
      ### For HTTPS
      - traefik.http.routers.${SERVICE_NAME}-https.tls=true
      - traefik.http.routers.${SERVICE_NAME}-https.tls.certresolver=cloudflare
      - traefik.http.routers.${SERVICE_NAME}-https.entrypoints=websecure
      - traefik.http.routers.${SERVICE_NAME}-https.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      ### Monitor with uptime-kuma
      - kuma.monitoring.group.name=Docker Containers
      - kuma.${SERVICE_NAME}.docker.parent_name=monitoring
      - kuma.${SERVICE_NAME}.docker.name=${SERVICE_NAME}
      - kuma.${SERVICE_NAME}.docker.type=docker
      - kuma.${SERVICE_NAME}.docker.docker_container=${SERVICE_NAME}
      - kuma.${SERVICE_NAME}.docker.docker_host=1
      - 'kuma.${SERVICE_NAME}.docker.tag_names=[{"name": "docker_tag"}]'
networks:
  traefik_network:
    external: true