role-vaultwarden/templates/vaultwarden.quadlet.j2

55 lines
2.0 KiB
Plaintext
Raw Permalink Normal View History

2023-09-19 21:33:32 +00:00
[Unit]
Description=Vaultwarden
[Container]
ContainerName=vaultwarden-{{ vaultwarden_identifier }}
2023-09-19 21:56:25 +00:00
Image=docker.io/vaultwarden/server:{{ vaultwarden_version }}
2023-09-19 21:33:32 +00:00
Environment=TZ=Europe/Berlin
Environment=DOMAIN=https://{{ vaultwarden_url }}
2023-09-20 13:37:54 +00:00
Environment=ROCKET_PORT=8080
Environment=SIGNUPS_ALLOWED=false
Environment=ADMIN_TOKEN={{ vaultwarden_admin_token }}
Environment=WEBSOCKET_ENABLED=true
Environment=SMTP_HOST={{ vaultwarden_smtp_host }}
Environment=SMTP_PORT={{ vaultwarden_smtp_port }}
Environment=SMTP_FROM={{ vaultwarden_smtp_from }}
Environment=SMTP_SECURITY={{ vaultwarden_smtp_security }}
Environment=SMTP_USERNAME={{ vaultwarden_smtp_username }}
Environment=SMTP_PASSWORD={{ vaultwarden_smtp_password }}
2023-09-19 21:33:32 +00:00
Network=traefik.network
Volume=/var/vaultwarden/{{ vaultwarden_identifier }}:/data
NoNewPrivileges=true
DropCapability=All
#UserNS=keep-id
# Required to access the Podman Socket
#SecurityLabelDisable=true
PodmanArgs=--userns=keep-id --security-opt label=disable
2023-09-20 14:27:42 +00:00
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}.tls.certresolver=resolver"
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}.tls=true"
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}.rule=Host(`{{ vaultwarden_url }}`)"
2023-09-20 14:45:18 +00:00
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}.service=vaultwarden{{ vaultwarden_identifier }}"
2023-09-20 14:27:42 +00:00
Label="traefik.http.services.vaultwarden{{ vaultwarden_identifier }}.loadbalancer.server.port=8080"
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}websocket.rule=Host(`{{ vaultwarden_url }}`) && Path(`/notifications/hub`)""
2023-09-20 14:45:18 +00:00
Label="traefik.http.routers.vaultwarden{{ vaultwarden_identifier }}websocket.service=vaultwarden{{ vaultwarden_identifier }}websocket"
2023-09-20 14:27:42 +00:00
Label="traefik.http.services.vaultwarden{{ vaultwarden_identifier }}websocket.loadbalancer.server.port=3012"
2023-09-19 21:33:32 +00:00
[Service]
Restart=on-failure
# Restart Delay
RestartSec=30
# Allowed time for the service to start.
TimeoutStartSec=90
# Allowed time for the service to stop.
TimeoutStopSec=90
[Install]
WantedBy=default.target