# Vaultwarden – kompatibilní Bitwarden server

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    ports:
      - "2999:80"
    volumes:
      - ./data:/data
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Prague
      - DOMAIN=https://CHANGE_ME
      - ROCKET_PORT=80
      - SIGNUPS_ALLOWED=true
      - INVITATIONS_ALLOWED=false
      - SHOW_PASSWORD_HINT=false
      - LOG_LEVEL=warn
      - EXTENDED_LOGGING=true
      - RUST_BACKTRACE=1
    networks:
      - vaultwarden_net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/alive"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

networks:
  vaultwarden_net:
    name: vaultwarden_default
    driver: bridge