---

services:
  vaultwarden:
    image: vaultwarden/server:1.35.2
    environment:
      - DOMAIN="https://vaultwarden.urmel.de"
      - ADMIN_TOKEN=${ADMIN_TOKEN}
    volumes:
      - data:/data
    networks:
      - proxy    
    restart: unless-stopped
    labels:
      traefik.enable: true
      traefik.http.routers.vaultwarden.rule: "Host(`vaultwarden.urmel.de`)"
      traefik.http.routers.vaultwarden.tls: true
      traefik.http.routers.vaultwarden.tls.certResolver: hetzner
      traefik.http.services.vaultwarden-https.loadbalancer.server.port: 80
    

volumes:
  data:
    name: vaultwarden_data

networks:
  proxy:
    name: traefik_exposed
    external: true