services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      - ADMIN_TOKEN=${ADMIN_TOKEN}
      - SMTP_HOST=smtp.mailbox.org
      - SMTP_PORT=587
      - SMTP_SECURITY=starttls
      - SMTP_FROM=mail@jens.pub
      - SMTP_USERNAME=mail@jens.pub
      - SMTP_PASSWORD=${SMTP_PASSWORD}
    volumes:
      - vaultwarden_data:/data
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`vault.home.jens.pub`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"

volumes:
  vaultwarden_data:

networks:
  proxy:
    external: true