---
version: "3.8"
services:
  bitwarden:
    image: vaultwarden/server:latest
    container_name: bitwarden
    restart: unless-stopped
    
    environment:
      - DOMAIN_ROOT=${DOMAIN_ROOT}

    labels:
      - "traefik.http.services.bitwarden.loadbalancer.server.port=80"
      - "traefik.enable=true"
      - "traefik.http.routers.bitwarden.rule=Host(`bitwarden.${DOMAIN_ROOT}`)"
      - 'traefik.http.routers.bitwarden.middlewares=authelia@docker'
 
    volumes:
     - vaultwarden_data:/data

    networks:
      - web

networks:
  web:
    external: true

volumes:
  vaultwarden_data:
    external: true