services:  
  vaultwarden:
    image: docker.io/vaultwarden/server:alpine
    container_name: vaultwarden
    restart: always
    user: {{ users['vaultwarden'] }}:{{ users['vaultwarden'] }}
    environment:
      - DOMAIN=https://vw.{{ domain }}
      - SIGNUPS_ALLOWED=false
      - ADMIN_TOKEN={{ vaultwarden_secrets['admin_token_hash'] | regex_replace('\$', '$$') }}
    ports:
      - 127.0.0.1:{{ ports['vaultwarden'] }}:80
    volumes:
      - {{ volumes['vaultwarden_datadir' ] }}:/data