version: "3.9"
services:
  vault:
    image: vault:latest
    container_name: vault
    restart: always
    networks:
      - traefik
    volumes:
      - ./data/file:/vault/file
      - ./data/config:/vault/config
      - ./data/logs:/vault/logs
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vault.rule=Host(`vault.esin.io`)"
      - "traefik.http.routers.vault.entrypoints=websecure"
      - "traefik.http.routers.vault.tls=true"
      - "traefik.http.routers.vault.middlewares=vault-mw"
      - "traefik.http.middlewares.vault-mw.compress=true"
      - "traefik.http.middlewares.vault-mw.compress.excludedcontenttypes=text/event-stream"
      - "traefik.http.services.vault.loadbalancer.server.port=8200"
    cap_add:
      - IPC_LOCK
    environment:
      - VAULT_ADDR=https://vault.esin.io:8200
    command: vault server -config=/vault/config/local.json
networks:
  traefik:
    external: true