services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: 1G
        reservations:
          cpus: "0.5"
          memory: 512M
    labels:
      - "homepage.group=infrastructure"
      - "homepage.name=Vaultwarden"
      - "homepage.icon=sh-vaultwarden"
      - "homepage.href=https://vault.nuclide.systems"
      - "homepage.instance.internal.href=http://192.168.1.40:11001"
      - "homepage.instance.public.href=https://vault.nuclide.systems"
    environment:
      VW_PG_PASSWORD: ${VW_PG_PASSWORD}
      DOMAIN: https://vault.nuclide.systems # required when using a reverse proxy; your domain; vaultwarden needs to know it's https to work properly with attachments
      SIGNUPS_ALLOWED: false # Deactivate this with "false" after you have created your account so that no strangers can register
      SIGNUPS_DOMAINS_WHITELIST: nucli.de
      #      ADMIN_TOKEN: CGYk2Iu/6Ff8jrNNwZ87L7B9kFK6fkQsQ+iJKavBkFMCFOuJMBu8o9wCmbeAcp4m
      TZ: Europe/Berlin
      #      SIGNUPS_VERIFY: false
      PUSH_ENABLED: true
      PUSH_INSTALLATION_ID: c723bd64-a7a8-40cb-9aee-b2da0091507c
      PUSH_INSTALLATION_KEY: ll4hLKpPmDiEJaPx6RwD
      PUSH_RELAY_URI: https://api.bitwarden.eu
      PUSH_IDENTITY_URI: https://identity.bitwarden.eu
      DATABASE_URL: postgresql://vaultwarden:${VW_PG_PASSWORD}@192.168.1.6:5432/vaultwarden
    volumes:
      - /opt/stacks/vaultwarden/data:/data # attachments, rsa_key.pem, config.json
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
    ports:
      - 11001:80 # you can replace the 11001 with your preferred port
networks:
  default:
    external: true
    name: shared_backend