init

roles/vps/templates/docker-compose.vaultwarden.yaml.j2

@@ -0,0 +1,74 @@
+---
+version: "3"
+services:
+  traefik:
+    container_name: traefik
+    image: traefik:1.7
+    command:
+      - "--api"
+      - "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
+      - "--entryPoints=Name:https Address::443 TLS"
+      - "--defaultentrypoints=http,https"
+      - "--acme"
+      - "--acme.storage=/etc/traefik/acme/acme.json"
+      - "--acme.entryPoint=https"
+      - "--acme.httpChallenge.entryPoint=http"
+      - "--acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
+      - "--acme.onHostRule=true"
+      - "--acme.onDemand=false"
+      - "--acme.email=kleinmaddin@googlemail.com"
+      - "--acme.acmelogging=true"
+      - "--docker"
+#      - "--docker.watch"
+      - "--logLevel=INFO"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - /etc/traefik/acme/acme.json:/etc/traefik/acme/acme.json
+      - /etc/traefik:/etc/traefik
+      - ./logs:/var/log/traefik
+    networks:
+      - traefik
+    ports:
+      - "80:80"
+      - "443:443"
+    labels:
+      traefik.frontend.rule: "Host:traefik.eichner.cc"
+      traefik.port: "8080"
+      traefik.frontend.auth.forward.address: "http://89.58.15.160:5252"
+      traefik.frontend.auth.forward.authResponseHeaders: "cookie"
+      traefik.backend: "traefik"
+      traefik.frontend.entryPoints: "https"
+#      traefik.frontend.auth.basic.users: "admin:$$apr1$S0AMFtfZ$yMnkgnpJzsG3JRAO2EXQ1/"
+      traefik.frontend.auth.basic.usersFile: "/etc/traefik/.htpasswd"
+    restart: unless-stopped
+
+networks:
+  traefik:
+    external:
+      name: traefik
+
+
+root@eichner:/opt/docker# cat vaultwarden/docker-compose.yml
+version: '3'
+
+services:
+  bitwarden:
+    container_name: bitwarden
+    image: vaultwarden/server:latest
+    env_file: .env
+    networks:
+      - traefik
+    labels:
+      - "traefik.frontend.rule=Host:vault.eichner.cc"
+      - "traefik.port=80"
+      - "traefik.backend=bitwarden"
+      - "traefik.frontend.entryPoints=https"
+    volumes:
+        - "/var/run/docker.sock:/var/run/docker.sock"
+        - "./data:/data"
+    restart: unless-stopped
+
+networks:
+  traefik:
+    external:
+      name: traefik