feat(Matomo): Add service

see: https://github.com/docker/compose/issues/11628

README.md

@@ -8,6 +8,7 @@ Vous trouverez dans ce dépôt l'ensemble des services Open Source que RésiLien
 
 - [Directus](./directus) : Permet d'administrer une base de données
 - [HedgeDoc](./hedgedoc) : Prise de note en Markdown collaborative en temps réel
+- [Matomo](./matomo) : Logiciel libre et open source de mesure de statistiques web
 - [listmonk](./listmonk) : Gestionnaire de listes de diffusion et de newsletter
 - [Mobilizon](./mobilizon): Permet l'organisation d'évènements et de gestion de groupes
 - [Nextcloud](./nextcloud) : Site d'hébergement de fichiers et une plateforme de collaboration
@@ -23,6 +24,7 @@ Vous trouverez dans ce dépôt l'ensemble des services Open Source que RésiLien
 - [GeoIP Update](./geoipupdate) : Permet de télécharger la base de données GeoIP2 permettant de localiser les IPs
 - [Gitea](./gitea) : Un service Git très simple à installer et à utiliser. Il est similaire à GitHub, Bitbucket ou Gitlab.
 - [Grafana](./grafana) : Un outil de supervision simple et élégant
+- [MariaDB](./mariadb) : MariaDB est un système de gestion de base de données, un fork communautaire de MySQL
 - [LLDAP](./lldap): Implémentation légère de LDAP pour l'authentification
 - [PostgreSQL](./postgres) : PostgreSQL est un système de gestion de base de données relationnelle et objet.
 - [Prometheus](./prometheus) : Un logiciel de surveillance informatique

directus/docker-compose.yml

@@ -18,6 +18,7 @@ services:
       KEY: ${DIRECTUS_KEY:?err}
       SECRET: ${DIRECTUS_SECRET:?err}
       TELEMETRY: false
+      ACCEPT_TERMS: ${DIRECTUS_ACCEPT_TERMS:-true}
 
       ADMIN_EMAIL: ${DIRECTUS_ADMIN_EMAIL:?err}
       ADMIN_PASSWORD: ${DIRECTUS_ADMIN_PASSWORD:?err}

lldap/.env

@@ -8,7 +8,7 @@ COMPOSE_FILE=${SERVICES_DIR}/lldap/docker-compose.yml:${SERVICES_DIR}/lldap/dock
 #######
 # LLDAP
 
-LLDAP_DOMAIN=lldap.cool.life
+SERVICE_DOMAIN=lldap.cool.life
 LLDAP_VOLUME_NAME=lldap_cool_life
 LLDAP_CONTAINER_NAME=lldap_cool_life
 LLDAP_IMAGE=nitnelave/lldap:v0.4.3

lldap/docker-compose.traefik.yml

@@ -10,13 +10,13 @@ services:
     labels:
       - traefik.enable=true
       - traefik.docker.network=${TRAEFIK_NETWORK_NAME:-traefik}
-      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-lldap}.rule=Host(`${LLDAP_DOMAIN:?err}`)
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-lldap}.rule=Host(`${SERVICE_DOMAIN:?err}`)
       - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-lldap}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}
       # - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-lldap}.tls.certResolver=letsencrypt
       - traefik.http.services.${TRAEFIK_ROUTER_NAME:-lldap}.loadbalancer.server.port=17170
       - traefik.http.services.${TRAEFIK_ROUTER_NAME:-lldap}.loadbalancer.server.scheme=http
 
       # https://github.com/lldap/lldap/issues/247#issuecomment-1489962511
-      # - traefik.tcp.routers.${TRAEFIK_ROUTER_NAME:-lldap}.rule=HostSNI(`${LLDAP_DOMAIN:?err}`)
+      # - traefik.tcp.routers.${TRAEFIK_ROUTER_NAME:-lldap}.rule=HostSNI(`${SERVICE_DOMAIN:?err}`)
       # - traefik.tcp.routers.${TRAEFIK_ROUTER_NAME:-lldap}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}
       # - traefik.tcp.services.${TRAEFIK_ROUTER_NAME:-lldap}.loadbalancer.server.port=3890

lldap/docker-compose.yml

@@ -16,7 +16,7 @@ services:
       - LLDAP_VERBOSE=${LLDAP_VERBOSE:-false}
 
       - LLDAP_JWT_SECRET=${LLDAP_JWT_SECRET:?err}
-      - LLDAP_HTTP_URL=https://${LLDAP_DOMAIN:?err}
+      - LLDAP_HTTP_URL=https://${SERVICE_DOMAIN:?err}
 
       - LLDAP_LDAP_BASE_DN=${LLDAP_LDAP_BASE_DN:?err}
       - LLDAP_LDAP_USER_DN=${LLDAP_LDAP_USER_DN:?err}

mariadb/.env

@@ -0,0 +1,8 @@
+#MARIADB_CONTAINER_NAME=
+#MARIADB_VOLUME_NAME=
+#MARIADB_IMAGE=
+MARIADB_ROOT_PASSWORD=replace-me
+MARIADB_USER=user-example
+MARIADB_PASSWORD=password-example
+MARIADB_DATABASE=mariadb-database-name-example
+#MARIADB_COMMAND=

mariadb/README.md

@@ -0,0 +1,28 @@
+# MariaDB
+
+> MariaDB est un système de gestion de base de données édité sous licence GPL. Il s'agit d'un fork communautaire de MySQL
+>
+> <cite>[Wikipédia][wikipedia]</cite>
+
+## Configuration
+
+Les variables contenu dans `.env` permettent de changer :
+
+- `MARIADB_IMAGE` : la version
+- `MARIADB_ROOT_PASSWORD` : le mot de passe _root_
+- `MARIADB_USER` : le nom d'utilisateur
+- `MARIADB_PASSWORD` : le mot de passe
+- `MARIADB_DATABASE` : le nom de la base de données
+- `MARIADB_CONTAINER_NAME` (par defaut _mariadb_) : le nom du conteneur
+- `MARIADB_VOLUME_NAME` (par defaut _mariadb_) : le nom du volume
+
+## Liens
+
+- [Site Officiel][site]
+- [Code source][source]
+- [Docker Hub][dockerhub]
+
+[wikipedia]: https://fr.wikipedia.org/wiki/MariaDB
+[site]: https://mariadb.org/
+[source]: https://github.com/MariaDB/server
+[dockerhub]: https://hub.docker.com/_/mariadb/

mariadb/docker-compose.yml

@@ -0,0 +1,23 @@
+version: "3.8"
+
+volumes:
+  mariadb:
+    name: ${MARIADB_VOLUME_NAME:-mariadb}
+
+services:
+  mariadb:
+    container_name: ${MARIADB_CONTAINER_NAME:-mariadb}
+    image: ${MARIADB_IMAGE:-mariadb:10.7.1-focal}
+    command: ${MARIADB_COMMAND}
+    restart: always
+    environment:
+      MARIADB_ROOT_PASSWORD: ${MARIADB_ROOT_PASSWORD:?err}
+      MARIADB_USER: ${MARIADB_USER:?err}
+      MARIADB_PASSWORD: ${MARIADB_PASSWORD:?err}
+      MARIADB_DATABASE: ${MARIADB_DATABASE:?err}
+      PUID: ${MARIADB_PUID:-1000}
+      PGID: ${MARIADB_PGID:-1000}
+    volumes:
+      - mariadb:/var/lib/mysql
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro

matomo/.env

@@ -0,0 +1,31 @@
+########
+# DOCKER
+
+#DOCKER_CONTEXT=
+#DOCKER_HOST=
+SERVICES_DIR=..
+COMPOSE_FILE=${SERVICES_DIR}/matomo/docker-compose.yml:${SERVICES_DIR}/matomo/docker-compose.local.yml
+#COMPOSE_PROJECT_NAME=
+
+## APP
+
+MATOMO_DOMAIN=localhost
+#MATOMO_CONTAINER_NAME=matomo
+#MATOMO_VOLUME_NAME=matomo
+#MATOMO_IMAGE=matomo:4.1.1-apache
+
+## MARIADB
+
+#MARIADB_VOLUME_NAME=
+#MARIADB_CONTAINER_NAME=
+#MARIADB_IMAGE=
+MARIADB_USER=user-example
+MARIADB_ROOT_PASSWORD=password-example
+MARIADB_PASSWORD=password-example
+MARIADB_DB=matomo_dev
+
+## TRAEFIK
+
+#TRAEFIK_NETWORK_NAME=
+#TRAEFIK_ROUTER_NAME=
+#TRAEFIK_ENTRYPOINTS=

matomo/README.md

@@ -0,0 +1,15 @@
+# Matomo
+
+> Matomo est une plateforme d'analyse Web complète et open source.
+
+## Liens
+
+- [Site Officiel][site]
+- [Documentation][documentation]
+- [Code source][source]
+- [Docker Hub][dockerhub]
+
+[site]: https://matomo.org/
+[source]: https://github.com/matomo-org/matomo
+[documentation]: https://matomo.org/faq/reports/tour-of-matomo-overview-of-the-reporting-interface/
+[dockerhub]: https://hub.docker.com/_/matomo/

matomo/docker-compose.local.yml

@@ -0,0 +1,6 @@
+---
+
+services:
+  matomo:
+    ports:
+      - ${LOCAL_PORT:-8080}:80

matomo/docker-compose.traefik.yml

@@ -0,0 +1,14 @@
+---
+
+networks:
+  default:
+    name: ${TRAEFIK_NETWORK_NAME:-traefik}
+    external: true
+
+services:
+  matomo:
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=${TRAEFIK_NETWORK_NAME:-traefik}
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-matomo}.rule=Host(`${MATOMO_DOMAIN:?err}`)
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-matomo}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}

matomo/docker-compose.yml

@@ -0,0 +1,48 @@
+---
+
+services:
+  db:
+    image: mariadb:lts
+    container_name: ${MARIADB_CONTAINER_NAME:-mariadb}
+    image: ${MARIADB_IMAGE:-mariadb:lts}
+    command: --max-allowed-packet=64MB
+    restart: always
+    volumes:
+      - db:/var/lib/mysql:Z
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    environment:
+      - MARIADB_AUTO_UPGRADE=1
+      - MARIADB_DATABASE=matomo
+      - MARIADB_DISABLE_UPGRADE_BACKUP=1
+      - MARIADB_INITDB_SKIP_TZINFO=1
+      - MARIADB_PASSWORD=${MARIADB_PASSWORD:?err}
+      - MARIADB_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD:?err}
+      - MARIADB_USER=matomo
+
+  app:
+    container_name: ${MATOMO_CONTAINER_NAME:-matomo}
+    image: ${MATOMO_IMAGE:-matomo:4.1.1-apache}
+    restart: always
+    volumes:
+#     - ./config:/var/www/html/config:z
+#     - ./logs:/var/www/html/logs:z
+      - matomo:/var/www/html:z
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    depends_on:
+      - db
+    environment:
+      - MATOMO_DATABASE_ADAPTER=mysql
+      - MATOMO_DATABASE_DBNAME=matomo
+      - MATOMO_DATABASE_HOST=db
+      - MATOMO_DATABASE_PASSWORD=${MARIADB_PASSWORD:?err}
+      - MATOMO_DATABASE_TABLES_PREFIX=matomo_
+      - MATOMO_DATABASE_USERNAME=matomo
+    ports:
+      - 8080:80
+
+volumes:
+  db:
+  matomo:
+    name: ${MATOMO_VOLUME_NAME:-matomo}

signaturepdf/docker-compose.traefik.https.yml

@@ -0,0 +1,11 @@
+---
+services:
+  signaturepdf:
+    labels:
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}.tls.certResolver=letsencrypt
+      # redirect HTTP to HTTPS
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}_http.rule=Host(`${SIGNATUREPDF_DOMAIN:?err}`)
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}_http.entrypoints=web
+      - traefik.http.middlewares.${TRAEFIK_ROUTER_NAME:-signaturepdf}_redirect_https.redirectscheme.scheme=https
+      - traefik.http.middlewares.${TRAEFIK_ROUTER_NAME:-signaturepdf}_redirect_https.redirectscheme.permanent=true
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}_http.middlewares=${TRAEFIK_ROUTER_NAME:-signaturepdf}_redirect_https

signaturepdf/docker-compose.traefik.yml

@@ -11,4 +11,4 @@ services:
       - traefik.enable=true
       - traefik.docker.network=${TRAEFIK_NETWORK_NAME:-traefik}
       - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}.rule=Host(`${SIGNATUREPDF_DOMAIN:?err}`)
-      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}.entrypoints=web
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-signaturepdf}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}

signaturepdf/docker-compose.yml

@@ -19,3 +19,5 @@ services:
       PDF_STORAGE_PATH: ${PDF_STORAGE_PATH}
       DISABLE_ORGANIZATION: ${DISABLE_ORGANIZATION}
       PDF_DEMO_LINK: ${PDF_DEMO_LINK}
+      DEFAULT_LANGUAGE: ${DEFAULT_LANGUAGE:-fr_FR.UTF-8}
+      PDF_STORAGE_ENCRYPTION: ${PDF_STORAGE_ENCRYPTION:-true}

snikket/.env

@@ -1,24 +0,0 @@
-########
-# DOCKER
-
-SERVICES_DIR=".."
-COMPOSE_FILE=${SERVICES_DIR}/snikket/docker-compose.yml:${SERVICES_DIR}/snikket/docker-compose.local.yml
-# COMPOSE_PROJECT_NAME=
-
-## APP
-
-# SNIKKET_DOMAIN={{ SNIKKET_DOMAIN }}
-SNIKKET_CONTAINER_NAME=snikket
-SNIKKET_DATA_VOLUME_NAME=snikket_data
-SNIKKET_ACME_CHALLENGES_VOLUME_NAME=acme_challenges
-# SNIKKET_SERVER_IMAGE=
-# SNIKKET_WEB_PORTAL_IMAGE=
-# SNIKKET_CERT_MANAGER_IMAGE
-# SNIKKET_WEB_PROXY_IMAGE
-
-#########
-# TRAEFIK
-
-# TRAEFIK_NETWORK_NAME=
-# TRAEFIK_ROUTER_NAME=
-# TRAEFIK_ENTRYPOINTS=

snikket/README.md

@@ -1,22 +0,0 @@
-# Snikket
-
-> Snikket est un service de messagerie instantanée basée sur le protocole XMPP destiné à être utilisé d'abord sur téléphone.
-
-## Clients
-
-Pour utiliser Snikket sur un téléphone Android, vous pouvez télécharger l'application sur F-droid (recommandé) ou sur le Google Play Store.
-
-Sur Linux, nous recommandons le client Dino (d'abord créer son compte Snikket via le téléphone).
-Sur iPhone, vous pouvez aussi télécharger l'application Snikket qui sera cependant moins complète que sur Android.
-
-## Liens
-
-- [Site Officiel][site]
-- [Documentation][documentation]
-- [Code source][source]
-- [Docker Hub][dockerhub]
-
-[site]: https://snikket.org
-[source]: https://github.com/snikket-im/snikket-selfhosted
-[documentation]: https://snikket.org/service/quickstart/
-[dockerhub]: https://hub.docker.com/r/snikket/snikket-server

snikket/docker-compose.local.yml

@@ -1,13 +0,0 @@
----
-
-version: "3.8"
-
-services:
-  snikket_proxy:
-    network_mode: host
-  snikket_certs:
-    network_mode: host
-  snikket_portal:
-    network_mode: host
-  snikket_server:
-    network_mode: host

snikket/docker-compose.traefik.yml

@@ -1,15 +0,0 @@
----
-
-version: "3.8"
-
-networks:
-  default:
-    name: ${TRAEFIK_NETWORK_NAME:-traefik}
-
-services:
-  snikket_proxy:
-    labels:
-      - traefik.enable=true
-      - traefik.docker.network=${TRAEFIK_NETWORK_NAME:-traefik}
-      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-snikket}.rule=Host(`${SNIKKET_DOMAIN:?err}`)
-      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-snikket}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}

snikket/docker-compose.yml

@@ -1,48 +0,0 @@
----
-
-version: "3.3"
-
-services:
-  snikket_proxy:
-    container_name: ${SNIKKET_CONTAINER_NAME:-snikket}_proxy
-    image: ${SNIKKET_WEB_PROXY_IMAGE:-snikket/snikket-web-proxy:beta}
-    environment:
-      - SNIKKET_DOMAIN: ${SNIKKET_DOMAIN:?err}
-      - SNIKKET_ADMIN_EMAIL: ${SNIKKET_ADMIN_EMAIL:?err}
-    volumes:
-      - snikket_data:/snikket
-      - acme_challenges:/var/www/html/.well-known/acme-challenge
-    restart: "unless-stopped"
-  snikket_certs:
-    container_name: ${SNIKKET_CONTAINER_NAME:-snikket}-certs
-    image: ${SNIKKET_CERT_MANAGER_IMAGE:-snikket/snikket-cert-manager:beta}
-    environment:
-      - SNIKKET_DOMAIN: ${SNIKKET_DOMAIN:?err}
-      - SNIKKET_ADMIN_EMAIL: ${SNIKKET_ADMIN_EMAIL:?err}
-    volumes:
-      - snikket_data:/snikket
-      - acme_challenges:/var/www/.well-known/acme-challenge
-    restart: "unless-stopped"
-  snikket_portal:
-    container_name: ${SNIKKET_CONTAINER_NAME:-snikket}-portal
-    image: ${SNIKKET_WEB_PORTAL_IMAGE:-snikket/snikket-web-portal:beta}
-    environment:
-      - SNIKKET_DOMAIN: ${SNIKKET_DOMAIN:?err}
-      - SNIKKET_ADMIN_EMAIL: ${SNIKKET_ADMIN_EMAIL:?err}
-    restart: "unless-stopped"
-
-  snikket_server:
-    container_name: ${SNIKKET_CONTAINER_NAME:-snikket}
-    image: ${SNIKKET_SERVER_IMAGE:-snikket/snikket-server:beta}
-    volumes:
-      - snikket_data:/snikket
-    environment:
-      - SNIKKET_DOMAIN: ${SNIKKET_DOMAIN:?err}
-      - SNIKKET_ADMIN_EMAIL: ${SNIKKET_ADMIN_EMAIL:?err}
-    restart: "unless-stopped"
-
-volumes:
-  acme_challenges:
-    name: ${SNIKKET_ACME_CHALLENGES_VOLUME_NAME:-acme_challenges}
-  snikket_data:
-    name: ${SNIKKET_DATA_VOLUME_NAME:-snikket_data}

vaultwarden/.env

@@ -9,7 +9,7 @@ COMPOSE_FILE=${SERVICES_DIR}/vaultwarden/docker-compose.yml
 
 #VAULTWARDEN_IMAGE=
 #VAULTWARDEN_VOLUME_NAME=
-VAULTWARDEN_DOMAIN=vaultwarden.local
+SERVICE_DOMAIN=vaultwarden.local
 
 #VAULTWARDEN_LOG_LEVEL=
 #VAULTWARDEN_SIGNUPS_ALLOWED=false

vaultwarden/README.md

@@ -10,6 +10,20 @@ Toutes les variables de configuration du service sont disponibles à [cette adre
 
 [Les clients de Bitwarden](https://bitwarden.com/#download) sont compatibles avec le serveur.
 
+## Ajout des mails en Français
+
+Il est possible de [traduire les mails](https://github.com/dani-garcia/vaultwarden/wiki/Translating-the-email-templates).
+
+```
+. .env
+cd /var/lib/docker/volumes/${VAULTWARDEN_VOLUME_NAME}/_data/
+mkdir templates && cd templates
+wget https://github.com/YoanSimco/vaultwarden-lang-fr/archive/refs/heads/main.zip
+unzip main.zip
+mv vaultwarden-lang-fr/email .
+rm vaultwarden-lang-fr-main/ main.zip -rf
+```
+
 ## Liens
 
 - [Documentation][documentation]

vaultwarden/docker-compose.sso.yml

@@ -0,0 +1,25 @@
+---
+
+services:
+  vaultwarden:
+    environment:
+      SSO_ENABLED: ${SSO_ENABLED:-true}
+      SSO_ONLY: ${SSO_ONLY:-true}
+      SSO_SIGNUPS_MATCH_EMAIL: ${SSO_SIGNUPS_MATCH_EMAIL:-true}
+      SSO_AUTHORITY: ${SSO_AUTHORITY}
+      SSO_SCOPES: ${SSO_SCOPES:-email groups profile offline_access}
+      SSO_AUTHORIZE_EXTRA_PARAMS: ${SSO_AUTHORIZE_EXTRA_PARAMS:-}
+      SSO_PKCE: ${SSO_PKCE:-false}
+      SSO_CLIENT_ID: ${SSO_CLIENT_ID}
+      SSO_CLIENT_SECRET: ${SSO_CLIENT_SECRET}
+      # SSO_MASTER_PASSWORD_POLICY: ${SSO_MASTER_PASSWORD_POLICY:-}
+      SSO_AUTH_ONLY_NOT_SESSION: ${SSO_AUTH_ONLY_NOT_SESSION:-false}
+      SSO_CLIENT_CACHE_EXPIRATION: ${SSO_CLIENT_CACHE_EXPIRATION:-0}
+      SSO_DEBUG_TOKENS: ${SSO_DEBUG_TOKENS:-false}
+
+      SSO_FRONTEND: ${SSO_FRONTEND:-override}
+      # SSO_EXPERIMENTAL_NO_MASTER_PWD: ${SSO_EXPERIMENTAL_NO_MASTER_PWD:-false}
+      SSO_ROLES_ENABLED: ${SSO_ROLES_ENABLED:-false}
+      SSO_ROLES_DEFAULT_TO_USER: ${SSO_ROLES_DEFAULT_TO_USER:-false}
+
+      SSO_ORGANIZATIONS_INVITE: ${SSO_ORGANIZATIONS_INVITE:-false}

vaultwarden/docker-compose.traefik.https.yml

@@ -0,0 +1,12 @@
+---
+
+services:
+  vaultwarden:
+    labels:
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}.tls.certResolver=letsencrypt
+      # redirect HTTP to HTTPS
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}_http.rule=Host(`${SERVICE_DOMAIN:?err}`)
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}_http.entrypoints=web
+      - traefik.http.middlewares.${TRAEFIK_ROUTER_NAME:-vaultwarden}_redirect_https.redirectscheme.scheme=https
+      - traefik.http.middlewares.${TRAEFIK_ROUTER_NAME:-vaultwarden}_redirect_https.redirectscheme.permanent=true
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}_http.middlewares=${TRAEFIK_ROUTER_NAME:-vaultwarden}_redirect_https

vaultwarden/docker-compose.traefik.yml

@@ -10,5 +10,5 @@ services:
     labels:
       - traefik.enable=true
       - traefik.docker.network=${TRAEFIK_NETWORK_NAME:-traefik}
-      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}.rule=Host(`${VAULTWARDEN_DOMAIN:?err}`)
+      - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}.rule=Host(`${SERVICE_DOMAIN:?err}`)
       - traefik.http.routers.${TRAEFIK_ROUTER_NAME:-vaultwarden}.entrypoints=${TRAEFIK_ENTRYPOINTS:-web}

vaultwarden/docker-compose.yml

@@ -6,15 +6,21 @@ volumes:
 
 services:
   vaultwarden:
-    image:  ${VAULTWARDEN_IMAGE:-vaultwarden/server:1.27.0-alpine}
+    image:  ${VAULTWARDEN_IMAGE:-vaultwarden/server:1.34.1-alpine}
     container_name: ${VAULTWARDEN_CONTAINER_NAME:-vaultwarden}
     restart: always
     environment:
       ADMIN_TOKEN: ${VAULTWARDEN_ADMIN_TOKEN:?err}
-      DOMAIN: https://${VAULTWARDEN_DOMAIN:?err}
+      DOMAIN: https://${SERVICE_DOMAIN:?err}
+      SENDS_ALLOWED: ${SENDS_ALLOWED:-true}
+      TRASH_AUTO_DELETE_DAYS: ${TRASH_AUTO_DELETE_DAYS:-}
+      DISABLE_ICON_DOWNLOAD: ${DISABLE_ICON_DOWNLOAD:-false}
+      SIGNUPS_ALLOWED: ${VAULTWARDEN_SIGNUPS_ALLOWED:-true}
+      SIGNUPS_VERIFY: ${SIGNUPS_VERIFY:-false}
+      SIGNUPS_DOMAINS_WHITELIST: ${SIGNUPS_DOMAINS_WHITELIST:-}
       INVITATION_ORG_NAME: ${VAULTWARDEN_INVITATION_ORG_NAME:-Vaultwarden}
       LOG_LEVEL: ${VAULTWARDEN_LOG_LEVEL:-Info}
-      SIGNUPS_ALLOWED: ${VAULTWARDEN_SIGNUPS_ALLOWED:-true}
+      ORG_GROUPS_ENABLED: ${VAULTWARDEN_ORG_GROUPS_ENABLED:-false}
     volumes:
       - vaultwarden:/data
       - /etc/timezone:/etc/timezone:ro