services:

#Bitwarden ()
  bitwarden:
    image: "vaultwarden/server:latest"
    container_name: vaultwarden
    volumes:
      - bitwarden_data:/data/
    networks:
      - proxy
    labels:
      ## Expose Bitwarden Through Trefik ##
      - "traefik.enable=true" # <== Enable traefik to proxy this container

      # Stopped for the duration of each backup run - see backup-docker-compose.yml.
      - "docker-volume-backup.stop-during-backup=true"

      - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
      - "traefik.http.routers.bitwarden-insecure.middlewares=redirect-web-secure"
      - "traefik.http.routers.bitwarden-insecure.rule=Host(`bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden-insecure.entrypoints=web"

      - "traefik.http.routers.bitwarden.rule=Host(`bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden.entrypoints=websecure"
      - "traefik.http.routers.bitwarden.tls.certresolver=myresolver"
    restart: unless-stopped

networks:
  proxy:
    external: true

volumes:
  bitwarden_data:
    name: bitwarden_data