# bitwarden - Password Management
  bitwarden:
    image: bitwardenrs/server:latest
    container_name: bitwarden
    restart: always
    volumes:
      - $DOCKERDIR/bitwarden:/data
    environment:
      - ADMIN_TOKEN=$BITWARDEN_TOKEN
      - WEBSOCKET_ENABLED=true
      - PUID=$PUID
      - PGID=$PGID
      - TZ=$TZ
    networks:
      - t2_proxy
    ports:
      - "3012:3012"
    labels:
      - "traefik.enable=true"
      ## HTTP Routers Auth Bypass
      - "traefik.http.routers.bitwarden-rtr-bypass.entrypoints=https"
      - "traefik.http.routers.bitwarden-rtr-bypass.tls=true"
      - "traefik.http.routers.bitwarden-rtr-bypass.rule=HostHeader(`bw.$DOMAINNAME`)"
      - "traefik.http.routers.bitwarden-rtr-bypass.service=bitwarden-svc"
      - "traefik.http.services.bitwarden-svc.loadbalancer.server.port=80"
      - "traefik.http.routers.bitwarden-rtr-bypass.middlewares=chain-no-auth@file"
      - "traefik.http.routers.bitwarden-ws.entrypoints=https"
      - "traefik.http.routers.bitwarden-ws.rule=HostHeader(`bw.$DOMAINNAME`) && Path(`/notifications/hub`)"
      - "traefik.http.routers.bitwarden-ws.middlewares=chain-no-auth@file"
      - "traefik.http.routers.bitwarden-ws.service=bitwarden-websocket"
      - "traefik.http.middlewares.bitwarden-ws=bw-stripPrefix@file"
      - "traefik.http.services.bitwarden-websocket.loadbalancer.server.port=3012"