feat: add VaultWarden

.env.example

@@ -13,4 +13,5 @@ HOSTNAME_PHOTOS=photos.example.com
 HOSTNAME_GITEA=git.example.com
 HOSTNAME_HOMEPAGE=ui.example.com
 HOSTNAME_SAGE=sage.example.com
-HOSTNAME_AQS=example.com
+HOSTNAME_AQS=example.com
+HOSTNAME_PASSWORDS=passwords.example.com

compose.yml

@@ -172,4 +172,27 @@ services:
         - "traefik.http.routers.homepage.entrypoints=websecure"
         - "traefik.http.routers.homepage.tls=true"
         - "traefik.http.routers.homepage.tls.certresolver=myresolver"
-        - "traefik.http.services.homepage.loadbalancer.server.port=80"
+        - "traefik.http.services.homepage.loadbalancer.server.port=80"
+
+  vaultwarden:
+    container_name: vaultwarden
+    image: vaultwarden/server:latest
+    environment:
+      - DOMAIN=https://${HOSTNAME_PASSWORDS}
+    volumes:
+      - ./.volumes/vaultwarden:/data
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+          cpus: '0.5'
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.vaultwarden.rule=Host(`${HOSTNAME_PASSWORDS}`)"
+      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
+      - "traefik.http.routers.vaultwarden.tls=true"
+      - "traefik.http.routers.vaultwarden.tls.certresolver=myresolver"
+      - "traefik.http.services.vaultwarden.loadbalancer.server.port=80"

homepage/src/index.html

@@ -85,10 +85,16 @@
                 ⬇️ Torrents
             </a>
         </li>
+        <li>
+            <a href="https://$HOSTNAME_PASSWORDS"
+               target="_blank">
+                🔑 Passwords
+            </a>
+        </li>
         <li>
             <a href="https://$HOSTNAME_GITEA"
                target="_blank">
-                📦 Gitea
+                📦 Git
             </a>
         </li>
         <li>

immich/compose.yml

@@ -40,6 +40,7 @@ services:
       - no-new-privileges:true
     labels:
       - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
       - "traefik.http.routers.immich.rule=Host(`${HOSTNAME_PHOTOS}`)"
       - "traefik.http.routers.immich.entrypoints=websecure"
       - "traefik.http.routers.immich.tls=true"