networks:

  proxy-net:
    external: true

services:

  vaultwarden:
  
    image: "vaultwarden/server:latest"
    container_name: "vaultwarden"
    environment:
      - ADMIN_TOKEN=${ADMIN_TOKEN}
      - SIGNUPS_ALLOWED=false
      - DOMAIN=https://vault.slowte.ch
    restart: unless-stopped
    networks:
      - proxy-net
    ports:
      - "3001:80"
    volumes:
      - ./containers_storage/vaultwarden:/data:rw
    labels:
      - traefik.enable=true
      - traefik.docker.network=proxy-net
      - traefik.http.routers.vaultwarden.rule=Host(`vault.slowte.ch`)
      - traefik.http.services.vaultwarden.loadbalancer.server.port=80
      - traefik.http.routers.vaultwarden.tls=true
      - traefik.http.routers.vaultwarden.tls.certresolver=letsencrypt