version: '3'
services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: "http://vaultwarden.ghoscht.com"
    volumes:
      - /mnt/hdd/docker/vaultwarden_data/:/data
    labels:
      - traefik.enable=true
      - traefik.http.routers.vaultwarden.entrypoints=websecure
      - traefik.http.routers.vaultwarden.rule=Host(`vaultwarden.ghoscht.com`)
      - traefik.http.routers.vaultwarden.tls=true
      - traefik.http.routers.vaultwarden.tls.certresolver=lencrypt
    networks:
      traefik-net:
networks:
  traefik-net:
    name: traefik-net
    external: true