From 789047f344f134e10ef3278a1933c9a33da90a29 Mon Sep 17 00:00:00 2001
From: Matthew Pomes <matthew.pomes@pm.me>
Date: Wed, 31 Dec 2025 18:31:27 -0600
Subject: [PATCH] Add vaultwarden service

---
 build-certs.sh      |  1 +
 docker-compose.yaml | 22 ++++++++++++++++++++++
 2 files changed, 23 insertions(+)

diff --git a/build-certs.sh b/build-certs.sh
index bdb8a2c..4ae78e4 100644
--- a/build-certs.sh
+++ b/build-certs.sh
@@ -9,4 +9,5 @@ docker compose run --rm certbot certonly -v --webroot --webroot-path /var/www/ce
   -d karakeep.loadingm.xyz \
   -d ollama.loadingm.xyz \
   -d memos.loadingm.xyz \
+  -d bitwarden.loadingm.xyz \
   -d gpodder.loadingm.xyz
diff --git a/docker-compose.yaml b/docker-compose.yaml
index a12b33d..a29bfb6 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -13,6 +13,7 @@ secrets:
 volumes:
   meilisearch:
   karakeep:
+  bitwarden:
 networks:
   karakeep:
     external: false
@@ -36,6 +37,8 @@ networks:
     external: false
   mail:
     external: false
+  bitwarden:
+    external: false
 services:
   web:
     image: "nginx"
@@ -209,6 +212,25 @@ services:
       - mail
     ports:
       - 127.0.0.1:25:25
+  bitwarden:
+    # env_file:
+    #   - bitwarden.env
+    environment:
+      # DOMAIN: "https://bitwarden.loadingm.xyz"
+      DOMAIN: "http://localhost:8081"
+      SMTP_HOST: mail
+      SMTP_FROM: bitwarden@loadingm.xyz
+      SMTP_SECURITY: off
+      SIGNUPS_ALLOWED: false
+    networks:
+      - bitwarden
+      - mail
+    image: vaultwarden/server:latest
+    restart: always
+    # ports:
+    #   - "127.0.0.1:8081:80"
+    volumes:
+      - /data/bitwarden:/data
   # calibre:
   #   image: "linuxserver/calibre-web"
   # 5d-diplomacy-frontend: