version: '3.8'

services:

#Bitwarden ()
  bitwarden:
    image: "vaultwarden/server:latest"
    container_name: vaultwarden
    volumes:
      - ./bitwarden/:/data/
    networks:
      - bitwarden
    depends_on:
      - traefik
    labels:
      ## Expose Bitwarden Through Trefik ##
      - "traefik.enable=true" # <== Enable traefik to proxy this container
      - "traefik.http.routers.bitwarden.rule=Host(`bitwarden.luke-else.co.uk`) || Host(`www.bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden.entrypoints=http"
      - "traefik.http.routers.bitwarden.middlewares=redirect@file"

      - "traefik.http.routers.bitwarden-secured.rule=Host(`bitwarden.luke-else.co.uk`) || Host(`www.bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden-secured.entrypoints=https"
      - "traefik.http.routers.bitwarden-secured.tls.certresolver=mytlschallenge"
    restart: unless-stopped

networks:
  bitwarden:
    external: true