services:
  bitwarden:
    image: vaultwarden/server:latest
    networks:
      - netgrimoire

    environment:
      TZ: America/Chicago
      PUID: "1001"
      PGID: "998"

    # Match your standard UID:GID execution model
    #user: "1001:998"

    ports:
      - target: 80
        published: 8093
        protocol: tcp
        mode: ingress

    volumes:
      - /DockerVol/bitwarden:/data
      # - /data/nfs/Baxter/Docker/vaultwarden:/data

    deploy:
      placement:
        constraints:
          - node.hostname == docker3

      labels:
        # Homepage
        homepage.group: "PNCHarris Apps"
        homepage.name: "Vaultwarden"
        homepage.icon: "vaultwarden.png"
        homepage.href: "https://pass.netgrimoire.com"
        homepage.description: "Password Manager"

        # Kuma
        kuma.pass.http.name: "Vaultwarden"
        kuma.pass.http.url: "http://bitwarden:80"

        # Caddy
        caddy: "pass.netgrimoire.com"
        # caddy.import: "authentik"
        caddy.reverse_proxy: "bitwarden:80"

        # Diun (image update monitoring)
        diun.enable: "true"

networks:
  netgrimoire:
    external: true