# /opt/docker/core/docker-compose.yml  (ADMIN_TOKEN скрыт — реальный в файле на VPS)
services:
  caddy:
    image: caddy:2
    restart: unless-stopped
    ports: ["80:80", "443:443"]
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    networks: [proxy]

  portainer:
    image: portainer/portainer-ce:lts
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data
    networks: [proxy]

  uptime-kuma:
    image: louislam/uptime-kuma:1
    restart: unless-stopped
    volumes: [uptime_data:/app/data]
    networks: [proxy]

  vaultwarden:
    image: vaultwarden/server:latest
    restart: unless-stopped
    environment:
      DOMAIN: "https://vault.nao-kvn.ru"
      SIGNUPS_ALLOWED: "false"
      ADMIN_TOKEN: "<задан в файле на VPS>"
    volumes: [vaultwarden_data:/data]
    networks: [proxy]

volumes: { caddy_data: , caddy_config: , portainer_data: , uptime_data: , vaultwarden_data: }
networks: { proxy: }