services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: "${VAULTWARDEN_URL}"  #  your domain vaultwarden needs to know its https to work properly with attachments - required when using a reverse proxy
      TZ: America/Chicago
      WEBSOCKET_ENABLED: true
      WEB_VAULT_ENABLED: true
    volumes:
      - /srv/docker/office/vaultwarden/:/data  # Persist data even if the container stops
    ports:
      - "11001:80"   # Map host port 80 to container port 80
      - "3012:3012"  # WebSocket port for real-time updates
    labels:
      - homepage.group=Apps
      - homepage.name=Vaultwarden
      - homepage.icon=vaultwarden.png
      - homepage.href=${VAULTWARDEN_URL}
      - homepage.description=Password manager
      - dockhand.url=${VAULTWARDEN_URL}
      - rackpeek.tags=services
    networks:
      - proxy-net

networks:
  proxy-net:
    external: true