version: '3'
services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    networks:
      - web
    volumes:
      - ${DOCKER_DATA}:/data
    labels:
      - traefik.http.routers.vaultwarden.rule=Host(`bitwarden.jafner.net`)
      - traefik.http.routers.vaultwarden.tls=true
      - traefik.http.routers.vaultwarden.tls.certresolver=lets-encrypt
networks:
  web:
    external: true