docker-compose.yml

version: '3'

services:

  app:

    image: vaultwarden/server:latest
    restart: always
    labels:
      - traefik.enable=true
      - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
      - traefik.http.routers.{{ servicename }}.entrypoints=websecure
      - traefik.http.services.{{ servicename }}.loadbalancer.server.port=80
    environment:
      - ADMIN_TOKEN={{ vaultwarden_admin_token }}
      - DOMAIN=https://{{ domain }}    
      - INVITATIONS_ALLOWED=false
      - INVITATION_ORG_NAME=warpzone
      - LOG_LEVEL=warn
      - SENDS_ALLOWED=true
      - SIGNUPS_ALLOWED=false
      - SMTP_HOST={{ smtp_host }}
      - SMTP_FROM={{ noreply_email_user }}
      - SMTP_PORT=587
      - SMTP_SECURITY=starttls
      - SMTP_USERNAME={{ noreply_email_user }}
      - SMTP_PASSWORD={{ noreply_email_pass }}
      - SIGNUPS_VERIFY=true
      - SHOW_PASSWORD_HINT=false
      - TZ=Europe/Berlin
      - WEBSOCKET_ENABLED=false
    volumes:
      - {{ basedir }}/data:/data
    networks:
      - web
      - default

  backup:
    image: bruceforce/vaultwarden-backup:latest
    restart: always
    init: true
    depends_on:
      - app
    volumes:
      - {{ basedir }}/data:/data/
      - {{ basedir }}/backup:/backup/
    environment:
      - TZ=Europe/Berlin
      - DELETE_AFTER=30
      - TIMESTAMP=true
      - GID=1000
      - UID=1000

networks:
  web:
    external: true