services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    extra_hosts:
     - "stalwart.lescourts.fr:172.20.0.90"
    volumes:
     - ./bitwarden:/data:rw
    environment:
     - ADMIN_TOKEN= # randomly generated string of characters, for example running openssl rand -base64 48
     - WEBSOCKET_ENABLED=false
     - SIGNUPS_ALLOWED=true
     - SMTP_HOST=<SMTP_HOST>
     - SMTP_FROM=<SMTP_FROM>
     - SMTP_PORT=<SMTP_PORT>
     - SMTP_SECURITY= #starttls, force_tls or off
     - SMTP_TIMEOUT=15
     - SMTP_USERNAME=<SMTP_USERNAME>
     - SMTP_PASSWORD=<SMTP_PASSWORD>
     - DOMAIN=https://<your domain name>
     - WEBSOCKET_ENABLED=true
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.rule=Host(`<your domain name>`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls=true"
      - "traefik.http.routers.vaultwarden.tls.certResolver=letsencrypt"
      - "traefik.docker.network=web"
      - homepage.group=Outils
      - homepage.name=Password
      - homepage.icon=vaultwarden.png
      - homepage.href=https://<your domain name>
      - homepage.description=VaultWarden
    networks:
      - web
networks:
  web:
    external: true