mirror of
https://github.com/nickyeoman/docker-compose-cookbooks.git
synced 2026-09-03 18:36:22 +00:00
codeandClaude Fable 5
8ab413804a
- VOL_PATH always defaults to /data; vscode/opencode VOL_PROJECTS nests it - TZ defaults to America/Vancouver (was UTC in etherpad, ntfy, redis) - compose section order fixed (volumes before environment, command after networks) - all default secrets are the literal ChangeThisPassword (grep-friendly, users must change them); removed a real key from ollama sample.env - sample.env synced with compose: missing vars added with defaults, dead vars removed - invoiceninja_dev/openarchiver_dev: app services had no environment block, wired all sample.env vars through so the stacks actually work - opencode: sample.env OLLAMA_HOST renamed to OLLAMA_HOST_URL to match compose - TZ values unquoted consistently Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Vaultwarden
Overview
Vaultwarden is a lightweight, Bitwarden-compatible password manager server written in Rust. It works with the official Bitwarden browser extensions and mobile apps.
Project Details
- Project Repository: github.com/dani-garcia/vaultwarden
- Container Image: Docker Hub
- Documentation: Vaultwarden Wiki
- Reverse Proxy Port:
80
Getting Started
- Copy
sample.env, setVAULT_DOMAINand a randomVAULT_ADMIN_TOKEN(openssl rand -base64 48) - Start the container:
docker compose up -d - Open http://localhost:8083/admin, sign in with the admin token, and invite your users (signups are disabled by default)
Environment Variable Notes
VAULT_DOMAIN – public base URL; Bitwarden clients require https,
so point this at your reverse-proxy domain for real use
VAULT_SIGNUPS_ALLOWED – open registration (default false; invite
users from the admin page instead)
VAULT_ADMIN_TOKEN – token for the /admin page; leave unset to
disable the admin page entirely
SMTP_* – optional mail settings for invitations and password-hint
emails; set all or none
VAULT_PORT – host port for the web UI (default 8083)
See the wiki for the full configuration reference.
Volume Notes
/data— SQLite database, attachments, icon cache, and RSA keys; stored at${VOL_PATH:-/data}/vaultwardenon the host. Back this up — it is the entire vault.
Network Notes
Requires proxy network
Docker Run
docker run -d \
--name=vaultwarden \
-e DOMAIN=https://vault.example.com \
-e SIGNUPS_ALLOWED=false \
-e ADMIN_TOKEN=changeme-to-a-long-random-string \
-p 8083:80 \
-v /data/vaultwarden:/data \
vaultwarden/server:latest
Additional Notes / Gotchas
- This is a
_devstack — experimental, not yet production-ready. - Bitwarden clients refuse to connect over plain http (except to localhost) — serve it through the reverse proxy with TLS.
- WebSocket notifications are served on the main port since
Vaultwarden 1.29; no separate
WEBSOCKET_ENABLEDsetting or port 3012 proxying is needed anymore. - Disable registration of new users
- SMTP configuration
Dockhand Stack, Deploy from Git
- Cookbooks Repository
- stackname: vaultwarden_dev
- Compose file path: vaultwarden_dev/compose.yaml
- Additional env file (optional): vaultwarden_dev/sample.env
Then "Load" vaultwarden_dev/sample.env into the Environment variables in dockhand.
Create the Stack