services:
  vaultwarden:
    image: repo.nstart.cloud/nstart/vaultwarden-server:1.0.2
    container_name: vaultwarden-server
    restart: unless-stopped
    env_file:
      - ./secrets/vw_admin_token.txt
      - ./secrets/vw_sso_secret.txt
    volumes:
      - vaultwarden-data:/data
    networks:
      - vaultwarden

  proxy:
    image: repo.nstart.cloud/nstart/vaultwarden-proxy:1.0.2
    container_name: vaultwarden-proxy
    restart: unless-stopped
    depends_on:
      vaultwarden:
        condition: service_healthy
    ports:
      - 8080:8080
    networks:
      - vaultwarden

  backup:
    image: repo.nstart.cloud/nstart/vaultwarden-backup:1.0.2
    container_name: vaultwarden-backup
    restart: unless-stopped
    depends_on:
      vaultwarden:
        condition: service_healthy
    volumes:
      - vaultwarden-backup:/backup
      - vaultwarden-data:/data/vaultwarden:ro
      - ./secrets:/data/secrets:ro
    networks:
      - vaultwarden

volumes:
  vaultwarden-data:
    name: vaultwarden-data
  vaultwarden-backup:
    name: vaultwarden-backup

networks:
  vaultwarden:
    driver: bridge
    name: vaultwarden
    ipam:
      driver: default
      config:
        - subnet: 172.30.0.0/24