services:  
  vaultwarden:
    image: docker.io/vaultwarden/server:alpine
    container_name: vaultwarden
    restart: always
    user: {{ users['vaultwarden'] }}:{{ users['vaultwarden'] }}
    environment:
      - DOMAIN=https://vw.{{ domain }}
      - SIGNUPS_ALLOWED=false
      - ADMIN_TOKEN=${ADMIN_TOKEN}
      - SMTP_HOST=mail.{{ domain }}
      - SMTP_FROM=vaultwarden@{{ domain }}
      - SMTP_PORT={{ ports['mailserver_smtps'] }}
      - SMTP_SECURITY=force_tls
      - SMTP_USERNAME={{ vaultwarden_secrets['smtp_username'] }}
      - SMTP_PASSWORD=${SMTP_PASSWORD}
    ports:
      - 127.0.0.1:{{ ports['vaultwarden'] }}:80
    volumes:
      - {{ volumes['vaultwarden_datadir' ] }}:/data