docker-compose.yml

services:
  app:
    image: vaultwarden/server:alpine
    restart: unless-stopped
    environment:
      - ADMIN_TOKEN
      - SIGNUPS_ALLOWED
      - LOG_LEVEL
      - PUSH_ENABLED
      - PUSH_INSTALLATION_ID
      - PUSH_INSTALLATION_KEY
      - DATABASE_URL=postgresql://vaultwarden:vaultwarden@db/vaultwarden
      - EXPERIMENTAL_CLIENT_FEATURE_FLAGS
    volumes:
      - app_data:/data
    networks:
      default:
      proxy_apps:
    depends_on:
      - db

  db:
    image: postgres:17-alpine
    restart: unless-stopped
    environment:
      - POSTGRES_USER=vaultwarden
      - POSTGRES_PASSWORD=vaultwarden
      - POSTGRES_DB=vaultwarden
    volumes:
      - db_data:/var/lib/postgresql/data
    networks:
      default:
    labels:
      ofelia.restart: "true"
      ofelia.enabled: "true"
      ofelia.job-exec.vaultwardendbbackup.schedule: "0 0 1 * * *"
      ofelia.job-exec.vaultwardendbbackup.command: "sh -c 'pg_dumpall -U vaultwarden -f /var/lib/postgresql/data/backup.sql'"

volumes:
  app_data:
  db_data:

networks:
  proxy_apps:
    name: proxy_apps
    external: true