docker-compose.yml

version: '3.9'
services:
  vaultwarden:
    image: vaultwarden/server:1.32.7@sha256:7a0aa23c0947be3582898deb5170ea4359493ed9a76af2badf60a7eb45ac36af
    hostname: vaultwarden
    container_name: vaultwarden__vaultwarden
    restart: unless-stopped

    environment:
      SIGNUPS_ALLOWED: 'false'
      ADMIN_TOKEN: ${ADMIN_TOKEN}

    volumes:
      - type: volume
        source: vaultwarden_data
        target: /data

    expose:
      - 80

    networks:
      - outband

    deploy:
      resources:
        limits:
          memory: 256m

  cloudflared:
    image: cloudflare/cloudflared:2024.12.2@sha256:cb38f3f30910a7d51545118a179b8516eb7066eac61855d62ce6ed733c54ce70
    hostname: cloudflared
    container_name: vaultwarden__cloudflared
    restart: unless-stopped

    environment:
      TUNNEL_METRICS: 0.0.0.0:9126
      TUNNEL_LOGFILE: /dev/stdout

    command: tunnel run --token ${TUNNEL_TOKEN}

    networks:
      outband:
      prometheus__cloudflared:
        aliases:
          - vaultwarden__cloudflared

    deploy:
      resources:
        limits:
          memory: 128m

volumes:
  vaultwarden_data:
    name: vaultwarden__vaultwarden_data
  mariadb_data:
    name: vaultwarden__mariadb_data

networks:
  outband:
    name: vaultwarden__outband

  prometheus__cloudflared:
    name: prometheus__cloudflared 
    external: true