version: '3.8'

services:

#Bitwarden ()
  bitwarden:
    image: "vaultwarden/server:latest"
    container_name: vaultwarden
    volumes:
      - ./bitwarden/:/data/
    networks:
      - proxy
    labels:
      ## Expose Bitwarden Through Trefik ##
      - "traefik.enable=true" # <== Enable traefik to proxy this container
      
      - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
      - "traefik.http.routers.bitwarden-insecure.middlewares=redirect-web-secure"
      - "traefik.http.routers.bitwarden-insecure.rule=Host(`bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden-insecure.entrypoints=web"

      - "traefik.http.routers.bitwarden.rule=Host(`bitwarden.luke-else.co.uk`)"
      - "traefik.http.routers.bitwarden.entrypoints=websecure"
      - "traefik.http.routers.bitwarden.tls.certresolver=myresolver"
    restart: unless-stopped

networks:
  proxy:
    external: true