services:
  restoretest-vaultwarden:
    image: vaultwarden/server:latest@sha256:9a8eec71f4a52411cc43edc7a50f33e9b6f62b5baca0dd95f0c6e7fd60f1a341
    container_name: restoretest-vaultwarden
    restart: "no"

    environment:
      TZ: Europe/Berlin
      DOMAIN: http://127.0.0.1:18080
      WEBSOCKET_ENABLED: "true"
      SIGNUPS_ALLOWED: "false"
      INVITATIONS_ALLOWED: "false"
      ADMIN_TOKEN_FILE: /run/secrets/admin_token
      ROCKET_PORT: 80
      ROCKET_ADDRESS: 0.0.0.0

    ports:
      - "127.0.0.1:18080:80"

    volumes:
      - /mnt/user/backups/restore-lab/vaultwarden/data:/data
      - /mnt/user/appdata/secrets/vaultwarden_admin_token.txt:/run/secrets/admin_token:ro

    security_opt:
      - no-new-privileges:true