version: '3'

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      - WEBSOCKET_ENABLED=true  # Enable WebSocket notifications.
      - ADMIN_TOKEN= $$argon2id$$v=19$$m=65540,t=3,p=4$$SnVJQXUvV2Y2S0lBQnR1OFNOREF6MDJUNlQxUXBrdWxYL0R6NzZTNEZVUT0$$n30ADvI1fjjmt1sH1E5bL4QfKa/lVvzBIVdKTTsLGdE
    volumes:
      - ./vw-data:/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.bitwarden_unkrig_dev.rule=Host(`bitwarden.unkrig.dev`)"
      - "traefik.http.routers.bitwarden_unkrig_dev.entrypoints=websecure"
      - "traefik.http.routers.bitwarden_unkrig_dev.tls.certresolver=variomedia"
networks:
  default:
    external:
      name: traefik