bitwarden deployment

services/bitwarden/files/docker-compose.yaml

@@ -0,0 +1,46 @@
+version: "2.1"
+
+services:
+  traefik:
+    image: traefik:1.7
+    restart: always
+    ports:
+      - 80:80
+      - 443:443
+    networks:
+      - web
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ${INSTALL_DIR}/traefik.toml:/traefik.toml
+      - ${INSTALL_DIR}/acme.json:/acme.json
+    container_name: traefik
+
+  bitwarden:
+    image: mprasil/bitwarden:latest
+    restart: always
+    expose:
+      - "80"
+      - "3012"
+    networks:
+      - web
+    volumes:
+      - ${BITWARDEN_DATA_DIR}/:/data/
+    environment:
+      SIGNUPS_ALLOWED: "false"
+      SERVER_ADMIN_EMAIL: "${BITWARDEN_ADMIN_EMAIL}"
+    labels:
+      - "traefik.frontend.rule=Host:${HOST}"
+      - "traefik.docker.network=web"
+      - "traefik.port=80"
+      - "traefik.enable=true"
+      - "traefik.web.frontend.rule=Host:${HOST}"
+      - "traefik.web.port=80"
+      - "traefik.hub.frontend.rule=Path:/notifications/hub"
+      - "traefik.hub.port=3012"
+      - "traefik.negotiate.frontend.rule=Path:/notifications/hub/negotiate"
+      - "traefik.negotiate.port=80"
+    container_name: bitwarden
+
+networks:
+  web:
+    name: web

services/bitwarden/files/traefik.toml

@@ -0,0 +1,28 @@
+debug = true
+
+logLevel = "INFO"
+defaultEntryPoints = ["https","http"]
+
+[entryPoints]
+  [entryPoints.http]
+  address = ":80"
+    [entryPoints.http.redirect]
+    entryPoint = "https"
+  [entryPoints.https]
+  address = ":443"
+  [entryPoints.https.tls]
+
+[retry]
+
+[docker]
+endpoint = "unix:///var/run/docker.sock"
+watch = true
+exposedByDefault = false
+
+[acme]
+email = "julian.toelle97@gmail.com"
+storage = "acme.json"
+entryPoint = "https"
+onHostRule = true
+  [acme.httpChallenge]
+  entryPoint = "http"