version: "3.9"

networks:
  proxy:
    external: true
  internal:
    external: true

volumes:
  vault:
    name: vault

services:
  vaultwarden:
    image: vaultwarden/server
    restart: unless-stopped
    container_name: vaultwarden
    volumes:
      - vault:/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vaultwarden.entrypoints=web"
      - "traefik.http.routers.vaultwarden.rule=Host(`vault.lan`)"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"
    networks:
      - internal
      - proxy