[mod] vault

.vscode/extensions.json

@@ -1,11 +1,17 @@
 {
     "recommendations": [
-        "quodatum.ext1",
         "quodatum.vscode-basex",
         "ms-azuretools.vscode-docker",
         "dbaeumer.vscode-eslint",
         "eamodio.gitlens",
         "kelvin.vscode-sshfs",
-        "alefragnani.project-manager"
+        "alefragnani.project-manager",
+        "redhat.vscode-xml",
+        "deltaxml.xpath-notebook",
+        "maattdd.gitless",
+        "buenon.scratchpads",
+        "bierner.markdown-mermaid",
+        "mfederczuk.w3c-ebnf",
+        "quodatum.xquery-notebook"
     ]
 }

code-serverx/config/.vscode/extensions.json

@@ -1,11 +1,17 @@
 {
     "recommendations": [
+        "quodatum.vscode-basex",
         "ms-azuretools.vscode-docker",
         "dbaeumer.vscode-eslint",
         "eamodio.gitlens",
         "kelvin.vscode-sshfs",
         "alefragnani.project-manager",
-        "johnpapa.vscode-peacock",
+        "redhat.vscode-xml",
-        "nonoroazoro.syncing"
+        "deltaxml.xpath-notebook",
+        "maattdd.gitless",
+        "buenon.scratchpads",
+        "bierner.markdown-mermaid",
+        "mfederczuk.w3c-ebnf",
+        "quodatum.xquery-notebook"
     ]
 }

vaultwarden/Caddyfile

@@ -0,0 +1,56 @@
+{$DOMAIN}:443 {
+
+  log {
+    level INFO
+
+    output file {$LOG_FILE} {
+
+      roll_size 10MB
+
+      roll_keep 10
+    }
+
+  }
+
+  # Get a cert by using the ACME HTTP-01 challenge.
+
+  tls {$EMAIL}
+  encode gzip
+
+  # Headers to improve security.
+
+  header {
+
+  # Enable HSTS
+
+  Strict-Transport-Security "max-age=31536000;"
+
+  # Enable cross-site filter (XSS)
+
+  X-XSS-Protection "1; mode=block"
+
+  # Disallow the site to be rendered within a frame (clickjacking protection)
+
+  X-Frame-Options "DENY"
+
+  # Prevent search engines from indexing
+
+  X-Robots-Tag "none"
+
+  # Remove Caddy branding
+
+  -Server
+
+  }
+
+  # Redirect notifications to the WebSocket.
+
+  reverse_proxy /notifications/hub vaultwarden:3012
+
+  reverse_proxy vaultwarden:80 {
+
+       header_up X-Real-IP {remote_host}
+
+  }
+
+}

vaultwarden/docker-compose.yml

@@ -1,34 +1,29 @@
 version: '3'
 
 services:
+
   vaultwarden:
-    container_name: vaultwarden
     image: vaultwarden/server:latest
-    restart: unless-stopped
+    container_name: vaultwarden
-    volumes:
+    restart: always
-      - ./vw-data/:/data/
-    ports:
-      - 8882:80
     environment:
-      - DOMAIN=https://quodatum.duckns.org
+      - WEBSOCKET_ENABLED=true
-      - LOGIN_RATELIMIT_MAX_BURST=10
+    volumes:
-      - LOGIN_RATELIMIT_SECONDS=60
+      - ./vw-data:/data
-      - ADMIN_RATELIMIT_MAX_BURST=10
+
-      - ADMIN_RATELIMIT_SECONDS=60
+  caddy:
-      - ADMIN_TOKEN=
+    image: caddy:2
-      - SENDS_ALLOWED=true
+    container_name: caddy
-      - EMERGENCY_ACCESS_ALLOWED=true
+    restart: always
-      - WEB_VAULT_ENABLED=true
+    ports:
-      - SIGNUPS_ALLOWED=false
+      - 84:80
-      - SIGNUPS_VERIFY=true
+      - 444:443
-      - SIGNUPS_VERIFY_RESEND_TIME=3600
+    volumes:
-      - SIGNUPS_VERIFY_RESEND_LIMIT=5
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
-      - SIGNUPS_DOMAINS_WHITELIST=orlop.duckdns.org
+      - ./caddy-config:/config
-      - SMTP_HOST=smtp.gmail.com
+      - ./caddy-data:/data
-      - SMTP_FROM=bunce.andy@gmail.com
+    environment:
-      - SMTP_FROM_NAME=Vaultwarden
+      - DOMAIN=https://vault.quodatum.duckdns.org
-      - SMTP_SECURITY=starttls
+      - EMAIL=bunce.andy@gmail.com
-      - SMTP_PORT=465
+      - LOG_FILE=/data/access.log
-      - SMTP_USERNAME=bunce.andy@gmail.com
+
-      - SMTP_PASSWORD= etsyjkzdzkzhnztf
-      - SMTP_AUTH_MECHANISM=

vaultwarden/readme.md

@@ -1 +1,3 @@
+https://webdock.io/en/docs/how-guides/app-installation-and-setup/how-install-vaultwarden-your-webdock-server
+# was
 https://www.techaddressed.com/tutorials/vaultwarden-docker-compose/