---
# Bitwarden - Self-hosted password manager
# Host: helsinki-a (100.67.6.27)
# Data: Docker volume (bitwarden)
# Access: https://bitwarden.pez.sh (via Caddy reverse proxy)

services:
  bitwarden:
    image: ghcr.io/bitwarden/self-host:beta
    restart: always
    depends_on:
      - db
    env_file:
      - settings.env
    ports:
      - "8080:8080"
      - "8443:8443"
    volumes:
      - bitwarden:/etc/bitwarden

  db:
    image: mariadb:10
    restart: always
    environment:
      MARIADB_USER: bitwarden
      MARIADB_PASSWORD: "${BW_DB_PASSWORD}"
      MARIADB_DATABASE: bitwarden_vault
      MARIADB_RANDOM_ROOT_PASSWORD: "true"
    volumes:
      - data:/var/lib/mysql

volumes:
  bitwarden:
  data: