From 0fb53bbb04d96a3065df7cae37de670fa8be716b Mon Sep 17 00:00:00 2001
From: LRVT <21357789+l4rm4nd@users.noreply.github.com>
Date: Tue, 7 Mar 2023 01:36:59 +0100
Subject: [PATCH] Update docker-compose.yml

add optional protection for /admin endpoint via traefik labels
---
 examples/vaultwarden/docker-compose.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/examples/vaultwarden/docker-compose.yml b/examples/vaultwarden/docker-compose.yml
index 59820da..aaf4cd0 100644
--- a/examples/vaultwarden/docker-compose.yml
+++ b/examples/vaultwarden/docker-compose.yml
@@ -38,6 +38,10 @@ services:
     #  - traefik.http.routers.vaultwarden-ws.rule=Host(`bitwarden.example.com`) && Path(`/notifications/hub`)
     #  - traefik.http.routers.vaultwarden-ws.service=vaultwarden-ws
     #  - traefik.http.services.vaultwarden-ws.loadbalancer.server.port=3012
+    #  - traefik.http.routers.vaultwarden-admin.rule=Host(`bitwarden.example.com`) && Path(`/admin`)
+    #  - traefik.http.routers.vaultwarden-admin.service=vaultwarden
+    #  - traefik.http.services.vaultwarden-admin.loadbalancer.server.port=80
+    #  - traefik.http.routers.vaultwarden-admin.middlewares=local-ipwhitelist@file,authelia@file
     volumes:
       - ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/vaultwarden/data:/data
       - ${DOCKER_VOLUME_STORAGE:-/mnt/docker-volumes}/vaultwarden/logs:/data/logs