services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      #DOMAIN: "https://vw.domain.tld"
      #ADMIN_TOKEN: ${ADMIN_TOKEN}
      WEBSOCKET_ENABLED: true
      SIGNUPS_ALLOWED: false
    volumes:
      - /srv/docker/vaultwarden/vw-data/:/data/
    ports:
      - 9445:80
    labels:
      - flame.type=application # "app" works too
      - flame.name=${SERVICE_NAME}
      - flame.url=https://${SERVICE_NAME}.${DOMAIN_NAME} #Adjust to your domain or IP
      - flame.icon=safe
      ### Enable Traefik
      - traefik.enable=true
      ### For HTTP
      #- traefik.http.routers.${SERVICE_NAME}.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      #- traefik.http.routers.${SERVICE_NAME}.entrypoints=web
      ### For HTTPS
      - traefik.http.routers.${SERVICE_NAME}-https.tls=true
      - traefik.http.routers.${SERVICE_NAME}-https.tls.certresolver=cloudflare
      - traefik.http.routers.${SERVICE_NAME}-https.entrypoints=websecure
      - traefik.http.routers.${SERVICE_NAME}-https.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)