Clean: keep only compose config

.gitignore

@@ -0,0 +1,17 @@
+# Secrets
+.env
+*.pem
+*.key
+
+# Docker volumes / data
+data/
+*-data/
+vw-data/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Backups
+*.tar.gz
+*.bak

docker-compose.yaml

@@ -0,0 +1,35 @@
+services:
+  vaultwarden:
+    image: vaultwarden/server:latest
+    container_name: vaultwarden
+    restart: unless-stopped
+    environment:
+      DOMAIN: "https://bitwarden.kzbrd.ru"
+      WEBSOCKET_ENABLED: "true"
+    volumes:
+      - ./vw-data/:/data/
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      
+      # --- Явно определяем сервисы для Traefik ---
+      - "traefik.http.services.vaultwarden-svc.loadbalancer.server.port=80"
+      - "traefik.http.services.vaultwarden-ws-svc.loadbalancer.server.port=3012"
+
+      # --- Основной роутер для веб-интерфейса ---
+      - "traefik.http.routers.vaultwarden.rule=Host(`bitwarden.kzbrd.ru`)"
+      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
+      - "traefik.http.routers.vaultwarden.tls.certresolver=myresolver" # ИСПРАВЛЕНО
+      - "traefik.http.routers.vaultwarden.service=vaultwarden-svc"
+
+      # --- Роутер для WebSocket ---
+      - "traefik.http.routers.vaultwarden-ws.rule=Host(`bitwarden.kzbrd.ru`) && Path(`/notifications/hub`)"
+      - "traefik.http.routers.vaultwarden-ws.entrypoints=websecure"
+      - "traefik.http.routers.vaultwarden-ws.tls.certresolver=myresolver" # ИСПРАВЛЕНО
+      - "traefik.http.routers.vaultwarden-ws.service=vaultwarden-ws-svc"
+
+networks:
+  proxy:
+    external: true
+    name: traefik_proxy