version: '3.8'
services:
  myvault:
    image: vault
    container_name: vault
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vault.entrypoints=https"
      - "traefik.http.routers.vault.rule=Host(`vault.bildme.ru`)"
      - "traefik.http.routers.vault.tls=true"
      - "traefik.http.routers.vault.tls.certresolver=letsEncrypt"
      - "traefik.http.services.vault-service.loadbalancer.server.port=8200"
      - "traefik.docker.network=webproxy"
    expose:
      - 8200
    environment:
      VAULT_API_ADDR: "http://0.0.0.0:8200"
    volumes:
      - ./data/file:/vault/file
      - ./data/config/:/vault/config/
      - ./data/logs/:/vault/logs/
      - ./data/plugins/:/vault/plugins/
    cap_add:
      - IPC_LOCK
    entrypoint: vault server -config=/vault/config/vault.hcl
    networks:
      - vault_net
      - webproxy

networks:
  vault_net:
    name: vault_net
  webproxy:
    name: webproxy