services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      DOMAIN: "https://bitwarden.kzbrd.ru"
      WEBSOCKET_ENABLED: "true"
    volumes:
      - ./vw-data/:/data/
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      
      # --- Явно определяем сервисы для Traefik ---
      - "traefik.http.services.vaultwarden-svc.loadbalancer.server.port=80"
      - "traefik.http.services.vaultwarden-ws-svc.loadbalancer.server.port=3012"

      # --- Основной роутер для веб-интерфейса ---
      - "traefik.http.routers.vaultwarden.rule=Host(`bitwarden.kzbrd.ru`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls.certresolver=myresolver" # ИСПРАВЛЕНО
      - "traefik.http.routers.vaultwarden.service=vaultwarden-svc"

      # --- Роутер для WebSocket ---
      - "traefik.http.routers.vaultwarden-ws.rule=Host(`bitwarden.kzbrd.ru`) && Path(`/notifications/hub`)"
      - "traefik.http.routers.vaultwarden-ws.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden-ws.tls.certresolver=myresolver" # ИСПРАВЛЕНО
      - "traefik.http.routers.vaultwarden-ws.service=vaultwarden-ws-svc"

networks:
  proxy:
    external: true
    name: traefik_proxy