networks:
  proxy:
    external: true

volumes:
  vault:
    name: vault

services:
  vault:
    image: vaultwarden/server:alpine
    restart: unless-stopped
    volumes:
      - vault:/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vault.entrypoints=web"
      - "traefik.http.routers.vault.rule=Host(`bitwarden-asu.ddnss.de`)"
      - "traefik.http.routers.vault.middlewares=vault"
      - "traefik.http.middlewares.vault.redirectscheme.scheme=https"
      - "traefik.http.routers.vault-secure.entrypoints=websecure"
      - "traefik.http.routers.vault-secure.rule=Host(`bitwarden-asu.ddnss.de`)"
      - "traefik.http.routers.vault-secure.service=vault-secure"
      - "traefik.http.routers.vault-secure.tls=true"
      - "traefik.http.routers.vault-secure.tls.certresolver=myresolver"
      - "traefik.http.services.vault-secure.loadbalancer.server.port=80"
    networks:
      - proxy