services:
  bitwarden:
    environment:
      WEBSOCKET_ENABLED: 'true'
      SIGNUPS_ALLOWED: 'true'
      DOMAIN: https://pw.sectorq.eu
      SMTP_HOST: mail.sectorq.eu
      SMTP_FROM: jaydee@sectorq.eu
      SMTP_PORT: '465'
      SMTP_SSL: 'true'
      SMTP_USERNAME: jaydee@sectorq.eu
      SMTP_PASSWORD: $SMTP_PASSWORD
      ADMIN_TOKEN: $ADMIN_PASSWORD
    image: ${DOCKER_REGISTRY:-}vaultwarden/server:latest
    ports:
    - target: 80
      published: 8181
      protocol: tcp
      mode: ingress
    restart: ${RESTART:-unless-stopped}
    volumes:
    - /share/docker_data/bitwarden/bw-data:/data
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        homepage.container: vaultwarden
        homepage.description: Password manager
        homepage.group: Utilities
        homepage.href: https://pw.sectorq.eu
        homepage.icon: bitwarden.png
        homepage.name: Bitwarden
        homepage.server: my-docker
        homepage.weight: '1'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager