# Vaultwarden

**Purpose:** Self-hosted password manager (Bitwarden-compatible server).

| Property       | Value                            |
| -------------- | -------------------------------- |
| Status         | Deployed (env vars pending)      |
| Image          | `vaultwarden/server:latest`      |
| Ports          | None (Traefik only)              |
| Restart policy | `unless-stopped`                 |
| Web UI         | <https://vault.home.jens.pub>      |
| Admin UI       | <https://vault.home.jens.pub/admin> |
| Compose file   | [`../services/vaultwarden/docker-compose.yml`](../services/vaultwarden/docker-compose.yml) |

---

## Configuration

- Web UI and API proxied through Traefik at `vault.home.jens.pub`
- Traefik routes to container port 80
- Admin panel available at `/admin` (requires `ADMIN_TOKEN`)

## Environment Variables

| Variable        | Description                          | Source   |
| --------------- | ------------------------------------ | -------- |
| `ADMIN_TOKEN`   | Token to access the `/admin` UI      | `.env`   |
| `SMTP_HOST`     | `smtp.mailbox.org`                   | hardcoded |
| `SMTP_PORT`     | `587`                                | hardcoded |
| `SMTP_SECURITY` | `starttls`                           | hardcoded |
| `SMTP_FROM`     | `mail@jens.pub`                      | hardcoded |
| `SMTP_USERNAME` | `mail@jens.pub`                      | hardcoded |
| `SMTP_PASSWORD` | mailbox.org account password         | `.env`   |

> `ADMIN_TOKEN` and `SMTP_PASSWORD` must be set in Portainer's stack env vars before starting the container.

## Volumes

| Volume            | Mount   |
| ----------------- | ------- |
| `vaultwarden_data` | `/data` — database, attachments, config |

## Networks

- `proxy` (external)