version: '3.7'

# https://hub.docker.com/r/vaultwarden/server
# https://github.com/dani-garcia/vaultwarden

networks:
  vaultwarden:

services:
  vaultwarden:
    image: vaultwarden/server:alpine
    container_name: vaultwarden
    restart: "${RESTART:-no}"
    hostname: vaultwarden
    domainname: ${BASE_DOMAIN}
    environment:
      - DOMAIN=https://passwords.${BASE_DOMAIN}
      # - WEBSOCKET_ENABLED=true

      - SMTP_HOST=mail
      - SMTP_FROM=vaultwarden@${BASE_DOMAIN}
      - SMTP_PORT=25
      - SMTP_SECURITY=off

      - ADMIN_TOKEN=${VAULTWARDEN_ADMIN_TOKEN}
      # - ADMIN_TOKEN=$$argon2id$$v=19$$m=65540,t=3,p=4$$UUFq04iWk/WXfYWvxfg3nnyhHBiHYKI9AqoSY4eKIP4$$qizUd/eRNDUjb90eXVbCZMT7bAu4ZPpzaO6EUL0LEJ8
      - SIGNUPS_ALLOWED=false
      - INVITATIONS_ALLOWED=false
      - SHOW_PASSWORD_HINT=false

      - DATABASE_URL=postgres://vaultwarden:${VAULTWARDEN_PG_PWD:-vaultwarden}@pg-vaultwarden:5432/vaultwarden
    volumes:
      - ${BASE_DIR:-/srv}/vaultwarden/data:/data
    depends_on:
      - pg-vaultwarden
    networks:
      - proxy
      - mail
      - vaultwarden

  pg-vaultwarden:
    image: postgres:${POSTGRES_VERSION}-alpine
    container_name: pg-vaultwarden
    restart: "${RESTART:-no}"
    environment:
      - POSTGRES_DB=vaultwarden
      - POSTGRES_USER=vaultwarden
      - POSTGRES_PASSWORD=${VAULTWARDEN_PG_PWD:-vaultwarden}
    volumes:
      - ${BASE_DIR:-/srv}/vaultwarden/psql:/var/lib/postgresql/data
    networks:
      - vaultwarden