## Vaultwarden Configuration File DATA_FOLDER=/app/data RSA_KEY_FILENAME=/app/data/rsa_key ICON_CACHE_FOLDER=/app/data/icon_cache ATTACHMENTS_FOLDER=/app/data/attachments {{ if (getenv "VAULTWARDEN_DATABASE_URL") -}} DATABASE_URL={{ getenv "VAULTWARDEN_DATABASE_URL" }} {{ end -}} USER_ATTACHMENT_LIMIT={{ getenv "VAULTWARDEN_USER_ATTACHMENT_LIMIT" "1024" }} ORG_ATTACHMENT_LIMIT={{ getenv "VAULTWARDEN_ORG_ATTACHMENT_LIMIT" "1024" }} {{ if (getenv "VAULTWARDEN_TEMPLATES_FOLDER") -}} TEMPLATES_FOLDER={{ getenv "VAULTWARDEN_TEMPLATES_FOLDER" }} {{ end -}} RELOAD_TEMPLATES={{ getenv "VAULTWARDEN_RELOAD_TEMPLATES" "false" | conv.ToBool }} IP_HEADER={{ getenv "VAULTWARDEN_IP_HEADER" "X-Forwarded-For" }} ICON_CACHE_TTL={{ getenv "VAULTWARDEN_ICON_CACHE_TTL" "2592000" }} ICON_CACHE_NEGTTL={{ getenv "VAULTWARDEN_ICON_CACHE_NEGTTL" "259200" }} WEB_VAULT_FOLDER=/app/web-vault/ WEB_VAULT_ENABLED={{ getenv "VAULTWARDEN_WEB_VAULT_ENABLED" "true" | conv.ToBool }} WEBSOCKET_ENABLED={{ getenv "VAULTWARDEN_WEBSOCKET_ENABLED" "false" | conv.ToBool }} WEBSOCKET_ADDRESS=0.0.0.0 WEBSOCKET_PORT=3012 EXTENDED_LOGGING={{ getenv "VAULTWARDEN_EXTENDED_LOGGING" "true" | conv.ToBool }} LOG_LEVEL={{ getenv "VAULTWARDEN_LOG_LEVEL" "Info" }} ENABLE_DB_WAL=true DISABLE_ICON_DOWNLOAD={{ getenv "VAULTWARDEN_DISABLE_ICON_DOWNLOAD" "false" | conv.ToBool }} ICON_DOWNLOAD_TIMEOUT={{ getenv "VAULTWARDEN_ICON_DOWNLOAD_TIMEOUT" "10" }} {{ if (getenv "VAULTWARDEN_ICON_BLACKLIST_REGEXL") -}} ICON_BLACKLIST_REGEX={{ getenv "VAULTWARDEN_ICON_BLACKLIST_REGEXL" }} {{ end -}} ICON_BLACKLIST_NON_GLOBAL_IPS={{ getenv "VAULTWARDEN_ICON_BLACKLIST_NON_GLOBAL_IPS" "true" | conv.ToBool }} DISABLE_2FA_REMEMBER={{ getenv "VAULTWARDEN_DISABLE_2FA_REMEMBER" "false" | conv.ToBool }} SIGNUPS_ALLOWED={{ getenv "VAULTWARDEN_SIGNUPS_ALLOWED" "true" | conv.ToBool }} SIGNUPS_VERIFY={{ getenv "VAULTWARDEN_SIGNUPS_VERIFY" "false" | conv.ToBool }} SIGNUPS_VERIFY_RESEND_TIME={{ getenv "VAULTWARDEN_SIGNUPS_VERIFY_RESEND_TIME" "3600" }} SIGNUPS_VERIFY_RESEND_LIMIT={{ getenv "VAULTWARDEN_SIGNUPS_VERIFY_RESEND_LIMIT" "6" }} {{ if (getenv "VAULTWARDEN_SIGNUPS_DOMAINS_WHITELIST") -}} SIGNUPS_DOMAINS_WHITELIST={{ getenv "VAULTWARDEN_SIGNUPS_DOMAINS_WHITELIST" }} {{ end -}} INVITATIONS_ALLOWED={{ getenv "VAULTWARDEN_INVITATIONS_ALLOWED" "true" | conv.ToBool }} INVITATION_ORG_NAME={{ getenv "VAULTWARDEN_INVITATION_ORG_NAME" "Vaultwarden" }} {{ if (getenv "VAULTWARDEN_ADMIN_TOKEN") -}} ADMIN_TOKEN={{ getenv "VAULTWARDEN_ADMIN_TOKEN" }} {{ end -}} DISABLE_ADMIN_TOKEN=false PASSWORD_ITERATIONS={{ getenv "VAULTWARDEN_PASSWORD_ITERATIONS" "100000" }} SHOW_PASSWORD_HINT={{ getenv "VAULTWARDEN_SHOW_PASSWORD_HINT" "true" | conv.ToBool }} DOMAIN={{ getenv "VAULTWARDEN_DOMAIN" "http://localhost/" }} AUTHENTICATOR_DISABLE_TIME_DRIFT={{ getenv "VAULTWARDEN_AUTHENTICATOR_DISABLE_TIME_DRIFT" "false" | conv.ToBool }} ROCKET_ADDRESS=0.0.0.0 ROCKET_PORT=8080 {{ if (getenv "VAULTWARDEN_ROCKET_WORKERS") -}} ROCKET_WORKERS={{ getenv "VAULTWARDEN_ROCKET_WORKERS" }} {{ end -}} {{ if (getenv "VAULTWARDEN_SMTP_HOST") -}} SMTP_HOST={{ getenv "VAULTWARDEN_SMTP_HOST" }} SMTP_FROM={{ getenv "VAULTWARDEN_SMTP_FROM" }} SMTP_FROM_NAME={{ getenv "VAULTWARDEN_SMTP_FROM_NAME" "Vaultwarden" }} SMTP_PORT={{ getenv "VAULTWARDEN_SMTP_PORT" "465" }} SMTP_SECURITY={{ getenv "VAULTWARDEN_SMTP_SECURITY" "force_tls" }} {{ if (getenv "VAULTWARDEN_SMTP_USERNAME") -}} SMTP_USERNAME={{ getenv "VAULTWARDEN_SMTP_USERNAME" }} SMTP_PASSWORD={{ getenv "VAULTWARDEN_SMTP_PASSWORD" }} {{ end -}} SMTP_AUTH_MECHANISM={{ getenv "VAULTWARDEN_SMTP_AUTH_MECHANISM" "Plain" }} SMTP_TIMEOUT={{ getenv "VAULTWARDEN_SMTP_TIMEOUT" "15" }} {{ end -}}