# Basic Vaultwarden docker-compose config
* can be run on single node setup or in swarm  

## howto
### single node
#### start container
```bash
docker compose up -d
```

#### stop container (and remove)
```bash
docker compose down
```

#### view logs
```bash
docker compose logs -f
```

#### reload config
```bash
docker compose restart
```

### swarm
#### start aka deploy
```bash
docker stack deploy -c docker-compose.yml vault
```

#### stop container aka service
```bash
docker service rm vault_vault
```

#### view logs
```bash
docker service logs vault_vault -f
```

#### reload config (no downtime if replica 2 or more)
```bash
docker service update vault_vault --force
```

## example caddy config
```
vault.example.com {
    header {
        Strict-Transport-Security max-age=31536000;
        X-XSS-Protection "1; mode=block"
        X-Frame-Options DENY
        X-Robots-Tag none
        -Server
    }
    reverse_proxy vault:80 {
        header_up X-Real-IP {remote_host}
    }

    # disable /admin page via domain (diable for inital config)
    handle /admin {
        respond 403
    }
}
```