vaultwarden

root@keex:~# cat ~/Settings/Linux/docker/hosts/keex/docker-compose/vaultwarden/docker-compose.yml
# used
version: '2'

volumes:
  data:
  data_attachments:
  data_icons:
  data_logs:
  data_rsa_key:
  data_templates:
  db:
  db_backup:
  f2b_data:
  #caddy_certs:
  #caddy_data:
  #caddy_config:
  #caddy_logs:

services:

  app:
    #image: bitwardenrs/server:1.16.3
    #image: bitwardenrs/server:1.19.0
    #image: bitwardenrs/server:1.20.0
    #image: bitwardenrs/server:1.21.0
    # bitwarden_rs renamed to vaultwarden
    #image: vaultwarden/server:1.22.2
    #image: vaultwarden/server:1.23.0
    #image: vaultwarden/server:1.24.0
    #image: vaultwarden/server:1.25.2
    #image: vaultwarden/server:1.26.0
    #image: vaultwarden/server:1.27.0
    #image: vaultwarden/server:1.28.0
    image: vaultwarden/server:1.28.1
    #mem_limit: 512M
    restart: always
    ports:
      - 88:80
    depends_on:
      - db
    env_file:
      - ./app.env
      - ./global.env
    volumes:
      - data:/data
      - data_attachments:/data/attachments
      - data_icons:/data/icon_cache
      - data_logs:/data/logs
      - data_rsa_key:/data/rsa_key
      - data_templates:/data/templates
      - /etc/letsencrypt:/etc/letsencrypt:ro
      - ./googledf6ff1dd0fc3f975.html:/web-vault/googledf6ff1dd0fc3f975.html


  db:
    #image: mariadb:10
    #image: mariadb:10.9.2
    image: mariadb
    #mem_limit: 256M
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=mysqld-bin --binlog-format=ROW
    env_file:
      - ./db.env
      - ./db_root.env
      - ./global.env
    volumes:
      - db:/var/lib/mysql

  db_backup:
    #image: fradelg/mysql-cron-backup:latest
    image: fradelg/mysql-cron-backup
    #mem_limit: 1G
    restart: always
    depends_on:
      - db
    env_file:
      - ./db.env
      - ./global.env
    environment:
      - MYSQLDUMP_OPTS=--single-transaction
      - MAX_BACKUPS=15
      - INIT_BACKUP=1
      # Every day at 03:00
      - CRON_TIME=0 3 * * *
      # Make it small
      - GZIP_LEVEL=9
    volumes:
      - db_backup:/backup
      # docker container exec vaultwarden_db_backup_1 ls -l /backup
      # docker container exec vaultwarden_db_backup_1 /restore.sh /backup/latest.bitwarden.sql.gz

  fail2ban:
    #container_name: fail2ban
    hostname: fail2ban
    cap_add:
      - NET_ADMIN
      - NET_RAW
    environment:
      - TZ=Europe/Berlin
      - F2B_DB_PURGE_AGE=14d
    image: crazymax/fail2ban:latest
    network_mode: host
    restart: always
    volumes:
      - f2b_data:/data
      - data_logs:/var/log


#
  #caddy:
    #image: caddy
    #restart: always
    #ports:
      #- 80:80 # needed for Let's Encrypt
      #- 443:443
    #environment:
      #ACME_AGREE: 'true'              # agree to Let's Encrypt Subscriber Agreement
      #DOMAIN: 'bitwarden-niwo.ddns.net' # CHANGE THIS! Used for Auto Let's Encrypt SSL
      #EMAIL: 'root.niwo@mailbox.org'  # CHANGE THIS! Optional, provided to Let's Encrypt
    #volumes:
      #- ./Caddyfile:/etc/caddy/Caddyfile:ro
      #- caddy_certs:/root/.caddy
      #- caddy_data:/data
      #- caddy_config:/config
      #- caddy_logs:/logs