version: '3.3'

services:
  vaultwarden:
    platform: linux/arm64
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      WEBSOCKET_ENABLED: 'True'  # Enable WebSocket notifications.
      SMTP_HOST: smtp.office365.com
      SMTP_FROM: dan@project-conquer.com
      SMTP_PORT: 587
      SMTP_SECURITY: starttls
      SMTP_USERNAME: dan@project-conquer.com
      SMTP_PASSWORD: Bud79124Bud79124
      DATABASE_URL: 'postgresql://bitwarden:xHR8z58CtnVqMVxRKtZN@bw.project-conquer.com:5432/bitwarden'
    networks:
      - traefik_proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`bw.project-conquer.com`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls.certresolver=le"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"
#      - "traefik.http.routers.vaultwarden.middlewares=internal-whitelist@file"
    volumes:
      - ./vw-data:/data
      - /var/run/docker.sock:/var/run/docker.sock

networks:
  traefik_proxy:
    external: true