From 679587fad68e34ff10e84bc4198956fec8b63ca7 Mon Sep 17 00:00:00 2001
From: pablo <pablomartincalvo@gmail.com>
Date: Wed, 8 Feb 2023 23:26:38 +0100
Subject: [PATCH] Added notes on vaultwarden

---
 vaultwarden/README.md           | 13 +++++++++++++
 vaultwarden/docker-compose.yaml | 13 +++++++++++++
 2 files changed, 26 insertions(+)
 create mode 100644 vaultwarden/README.md
 create mode 100644 vaultwarden/docker-compose.yaml

diff --git a/vaultwarden/README.md b/vaultwarden/README.md
new file mode 100644
index 0000000..5b6fc41
--- /dev/null
+++ b/vaultwarden/README.md
@@ -0,0 +1,13 @@
+# Vaultwarden
+
+I've set up vaultwarden on Frankie. Here are a few notes about it.
+
+
+## Hardening
+
+To prevent users from registering freely, activate the following env var:
+`SIGNUPS_ALLOWED=false`.
+
+To activate the admin panel, you need to add the admin token as an env var, 
+like this: `ADMIN_TOKEN=<the-very-safe-token>`. Afterwards, you can enter the
+admin panel by adding `/admin` in the URL.
\ No newline at end of file
diff --git a/vaultwarden/docker-compose.yaml b/vaultwarden/docker-compose.yaml
new file mode 100644
index 0000000..f73d371
--- /dev/null
+++ b/vaultwarden/docker-compose.yaml
@@ -0,0 +1,13 @@
+version: "2"
+services:
+    vaultwarden:
+        image: vaultwarden/server:latest
+        container_name: vaultwarden
+        restart: unless-stopped
+        environment:
+            - SIGNUPS_ALLOWED=false
+            - ADMIN_TOKEN=this-one-should-be-huge!!!
+        volumes:
+            - ./vw-data:/data/
+        ports:
+            - 6969:80