services:
  server:
    container_name: vaultwarden-server
    image: vaultwarden/server:latest
    restart: unless-stopped
    ports:
      - 9993:80
    environment:
      - DOMAIN=${DOMAIN:-http://localhost}
    volumes:
      - "data:/data/"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"

      # Prod Router
      - "traefik.http.routers.vaultwarden.rule=Host(`vw.forust.xyz`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls.certresolver=letsencrypt"
      # Local Router
      - "traefik.http.routers.vaultwarden-local.rule=Host(`vw.workstation.internal`)"
      - "traefik.http.routers.vaultwarden-local.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls=true"
      # Dev Router
      - "traefik.http.routers.vaultwarden-dev.rule=Host(`vw.gigaforust.internal`)"
      - "traefik.http.routers.vaultwarden-dev.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden-dev.tls=true"
    networks:
      - proxy
volumes:
  data:
networks:
  proxy:
    external: true