role-vaultwarden/templates/vaultwarden.quadlet.j2

41 lines
1.1 KiB
Plaintext
Raw Normal View History

2023-09-19 21:33:32 +00:00
[Unit]
Description=Vaultwarden
[Container]
ContainerName=vaultwarden-{{ vaultwarden_identifier }}
Image=docker.io/library/vaultwarden/server:{{ traefik_version }}
Environment=TZ=Europe/Berlin
Environment=DOMAIN=https://{{ vaultwarden_url }}
Network=traefik.network
Volume=/var/vaultwarden/{{ vaultwarden_identifier }}:/data
NoNewPrivileges=true
DropCapability=All
#UserNS=keep-id
# Required to access the Podman Socket
#SecurityLabelDisable=true
PodmanArgs=--userns=keep-id --security-opt label=disable
Label="traefik.http.routers.vaultwarden-{{ vaultwarden_identifier }}.tls.certresolver=resolver"
Label="traefik.http.routers.vaultwarden-{{ vaultwarden_identifier }}.tls=true"
Label="traefik.http.routers.vaultwarden-{{ vaultwarden_identifier }}.rule=Host(`{{ vaultwarden_url }}`)"
Label="traefik.http.routers.vaultwarden-{{ vaultwarden_identifier }}.loadbalancer.server.port=80"
[Service]
Restart=on-failure
# Restart Delay
RestartSec=30
# Allowed time for the service to start.
TimeoutStartSec=90
# Allowed time for the service to stop.
TimeoutStopSec=90
[Install]
WantedBy=default.target