homelab/proxmox/services/swarm-based/vaultwarden.yml
2026-04-01 16:07:44 -04:00

45 lines
997 B
YAML

version: '3.8'
# Deploy with:
# docker stack deploy -c vaultwarden.yml vaultwarden
#
# Runs on: pve-tools
# Self-hosted Bitwarden-compatible password manager.
# Uses default SQLite backend; data persisted in a named volume.
# Web vault exposed on port 8222.
services:
vaultwarden:
image: vaultwarden/server:latest
environment:
SIGNUPS_ALLOWED: "false"
INVITATIONS_ALLOWED: "true"
SHOW_PASSWORD_HINT: "false"
ROCKET_PORT: 8222
ADMIN_TOKEN: ${VAULT_ADMIN_TOKEN}
ports:
- target: 8222
published: 8222
protocol: tcp
mode: host
volumes:
- vaultwarden_data:/data
networks:
- overlay-net
deploy:
replicas: 1
placement:
constraints:
- node.hostname == pve-tools
restart_policy:
condition: on-failure
delay: 5s
max_attempts: 3
volumes:
vaultwarden_data:
networks:
overlay-net:
external: true
name: ${OVERLAY_NETWORK:-homelab-net}