services:
  app:
    image: vaultwarden/server:${VAULTWARDEN_VERSION:-latest}
    container_name: vaultwarden-app
    environment:
      - DOMAIN=${VAULTWARDEN_DOMAIN}
      - ADMIN_TOKEN=${VAULTWARDEN_ADMIN_TOKEN}
      - SIGNUPS_ALLOWED=${VAULTWARDEN_SIGNUPS_ALLOWED:-false}
    volumes:
      - vaultwarden-data:/data/
    ports:
      - ${VAULTWARDEN_PORT:-80}:80
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/alive"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 20s
    deploy:
      resources:
        limits:
          memory: 512m
    restart: unless-stopped

volumes:
  vaultwarden-data:
    name: vaultwarden-data
    driver: local
    driver_opts:
      type: nfs
      o: "addr=${VAULTWARDEN_NFS_SERVER},rw,noatime,rsize=65536,wsize=65536,timeo=600,nfsvers=4"
      device: "${VAULTWARDEN_NFS_DEVICE}"