[Unit]
Description=Vaultwarden (Bitwarden Server)
Documentation=https://github.com/dani-garcia/vaultwarden

[Container]
ContainerName=vaultwarden
Image=docker.io/vaultwarden/server:latest
AutoUpdate=registry
Network=reverse.network
Environment=ROCKET_PORT=8080
Environment=DOMAIN=https://vault.bugabinga.net
Environment=PUSH_RELAY_URI=https://api.bitwarden.eu
Environment=PUSH_IDENTITY_URI=https://identity.bitwarden.eu
Environment=PUSH_ENABLED=true
Secret=installation_key,type=env,target=PUSH_INSTALLATION_ID
Secret=installation_id,type=env,target=PUSH_INSTALLATION_KEY
Secret=admin_token,type=env,target=ADMIN_TOKEN
Environment=SMTP_HOST=box.bugabinga.net
Environment=SMTP_FROM=vault@bugabinga.net
Environment=SMTP_PORT=465
Environment=SMTP_SECURITY=force_tls
Secret=smtp-user,type=env,target=SMTP_USERNAME
Secret=smtp-pass,type=env,target=SMTP_PASSWORD
UserNS=keep-id
Volume=/data/Databases/vaultwarden:/data:z

[Service]
Restart=on-failure
TimeoutStartSec=300

[Install]
WantedBy=default.target