init

docs/vaultwarden.md

@@ -0,0 +1,45 @@
+# Vaultwarden
+
+**Purpose:** Self-hosted password manager (Bitwarden-compatible server).
+
+| Property       | Value                            |
+| -------------- | -------------------------------- |
+| Status         | Deployed (env vars pending)      |
+| Image          | `vaultwarden/server:latest`      |
+| Ports          | None (Traefik only)              |
+| Restart policy | `unless-stopped`                 |
+| Web UI         | <https://vault.home.jens.pub>      |
+| Admin UI       | <https://vault.home.jens.pub/admin> |
+| Compose file   | [`../services/vaultwarden/docker-compose.yml`](../services/vaultwarden/docker-compose.yml) |
+
+---
+
+## Configuration
+
+- Web UI and API proxied through Traefik at `vault.home.jens.pub`
+- Traefik routes to container port 80
+- Admin panel available at `/admin` (requires `ADMIN_TOKEN`)
+
+## Environment Variables
+
+| Variable        | Description                          | Source   |
+| --------------- | ------------------------------------ | -------- |
+| `ADMIN_TOKEN`   | Token to access the `/admin` UI      | `.env`   |
+| `SMTP_HOST`     | `smtp.mailbox.org`                   | hardcoded |
+| `SMTP_PORT`     | `587`                                | hardcoded |
+| `SMTP_SECURITY` | `starttls`                           | hardcoded |
+| `SMTP_FROM`     | `mail@jens.pub`                      | hardcoded |
+| `SMTP_USERNAME` | `mail@jens.pub`                      | hardcoded |
+| `SMTP_PASSWORD` | mailbox.org account password         | `.env`   |
+
+> `ADMIN_TOKEN` and `SMTP_PASSWORD` must be set in Portainer's stack env vars before starting the container.
+
+## Volumes
+
+| Volume            | Mount   |
+| ----------------- | ------- |
+| `vaultwarden_data` | `/data` — database, attachments, config |
+
+## Networks
+
+- `proxy` (external)