VAULT_IMAGE=vaultwarden/server:latest
VAULT_RESTART=unless-stopped
VOL_PATH=/data
VAULT_PORT=8083

# Public URL (set to your proxy domain; clients require https)
VAULT_DOMAIN=http://localhost:8083

# Keep signups disabled; invite users via the admin page instead
VAULT_SIGNUPS_ALLOWED=false

# Admin page token — generate with: openssl rand -base64 48
# Leave unset to disable the /admin page entirely
VAULT_ADMIN_TOKEN=ChangeThisPassword

# SMTP (optional — set all of these or none)
# SMTP_HOST=smtp.domain.tld
# SMTP_FROM=vaultwarden@domain.tld
# SMTP_PORT=587
# SMTP_SECURITY=starttls
# SMTP_USERNAME=username
# SMTP_PASSWORD=password