---

services:
  vaultwarden:
    image: {{ docker.containers.vaultwarden.image }}
    user: {{ docker.containers.vaultwarden.user }}:{{ docker.containers.vaultwarden.user }}
    container_name: {{ docker.containers.vaultwarden.name }}
    restart: always
    env_file: .env
    environment:
      DOMAIN: "https://pw.mgutzeit.de"  # required when using a reverse proxy; your domain; vaultwarden needs to know it's https to work properly with attachments
      SIGNUPS_ALLOWED: "false" # Deactivate this with "false" after you have created your account so that no strangers can register
      # Domains: gmail.com, googlemail.com
    volumes:
      - ./vw-data:/data 
      - /etc/localtime:/etc/localtime:ro
    ports:
      - {{ docker.containers.vaultwarden.port }}:80

  backup:
    image: {{ docker.containers.vaultwarden.bak_image }}
    container_name: {{ docker.containers.vaultwarden.bak_name }}
    restart: always
    env_file: .env
    environment:
      RCLONE_REMOTE_NAME: 'BitwardenBackup'
      RCLONE_REMOTE_DIR: '/BitwardenBackup/'
      RCLONE_GLOBAL_FLAG: ''
      CRON: '0 */6 * * *'
      ZIP_ENABLE: 'TRUE'
      ZIP_TYPE: 'zip'
      BACKUP_FILE_SUFFIX: '%Y%m%d'
      BACKUP_KEEP_DAYS: 30
      MAIL_SMTP_ENABLE: 'TRUE'
      MAIL_SMTP_VARIABLES: '-S v15-compat -S smtp-use-starttls -S mta=smtp://gutzeit.moritz%40gmail.com:${SMTP_PASSWORD}@smtp.gmail.com:587 -S smtp-auth=login -S from=gutzeit.moritz@gmail.com'
      MAIL_TO: 'gutzeit.moritz@gmail.com'
      MAIL_WHEN_SUCCESS: 'FALSE'
      MAIL_WHEN_FAILURE: 'TRUE'
      TIMEZONE: 'CET'
    volumes:
      - ./vw-data:/bitwarden/data/
      - ./vw-rclone-data:/config/