vaultwarden: avalik domeen vault.odamus.com + prod_net võrk

secondary/docker-compose.yml

@@ -40,19 +40,23 @@ services:
     container_name: vaultwarden
     restart: unless-stopped
     environment:
-      # asenda oma domeeniga või jäta kommenteerituks kui kasutad ainult LAN-i
-      DOMAIN: "https://ohmu.tail20e23.ts.net"
+      # Avalik domeen (edge Caddy -> ohmu prod_caddy -> vaultwarden)
+      DOMAIN: "https://vault.odamus.com"
       SIGNUPS_ALLOWED: "false"
       WEBSOCKET_ENABLED: "true"
+      PUID: "1000"
+      PGID: "1000"
+      # ADMIN_TOKEN tuleb secondary/.env-ist (gitignore'itud)
+      ADMIN_TOKEN: "${VAULTWARDEN_ADMIN_TOKEN}"
     volumes:
       - /data/docker/vaultwarden:/data
-      - /data/docker/vaultwarden/nginx-vaultwarden.conf:/etc/nginx/nginx.conf:ro
       - /backups/docker/vaultwarden:/backups
       - /etc/localtime:/etc/localtime:ro
     ports:
       - "127.0.0.1:9080:80"
     networks:
       - ai_network
+      - prod_net
 
   hop-web:
     image: apache/hop-web:latest
@@ -99,3 +103,6 @@ networks:
   ai_network:
     external: true
     name: main_ai_network
+  prod_net:
+    external: true
+    name: prod_net