From d5fbaa56458ade6844bc78dc46ba711a67aa4074 Mon Sep 17 00:00:00 2001
From: "F. Javier \"habiwan\" Puig Diaz"
 <48130922+habiwan@users.noreply.github.com>
Date: Sun, 21 Jun 2026 17:07:48 +0100
Subject: [PATCH] Update vpnstack.yaml

adding vaultwarden since it seems vaultwarden.net has been down for a few days
---
 vpnstack.yaml | 42 +++++++++++++++++++++++++++++++++---------
 1 file changed, 33 insertions(+), 9 deletions(-)

diff --git a/vpnstack.yaml b/vpnstack.yaml
index fd7cf27..a321f60 100644
--- a/vpnstack.yaml
+++ b/vpnstack.yaml
@@ -2,21 +2,40 @@ services:
   wgdashboard:
     image: donaldzou/wgdashboard:latest
     container_name: wgdashboard
-    restart: unless-stopped
+    restart: always
+    network_mode: bridge
     ports:
-      - 10086:10086/tcp
+      - 10086:10086
       - 51888:51888/udp
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
     volumes:
       - wgconf:/etc/wireguard
       - wgdata:/data
     cap_add:
       - NET_ADMIN
       - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      
+  vaultwarden:
+    image: vaultwarden/server:latest
+    container_name: vaultwarden
+    restart: unless-stopped
+    network_mode: bridge
+    ports:
+      - 443:80/tcp
+    environment:
+      - ROCKET_TLS=${VAULTWARDEN_TAILSCALE_CERTS}
+    volumes:
+      - vw-data:/data
 
   duckdns:
     image: lscr.io/linuxserver/duckdns:latest
     container_name: duckdns
     restart: unless-stopped
+    network_mode: bridge
     environment:
       - TZ=Europe/London
       - SUBDOMAINS=${DUCKDNS_SUBDOMAIN}
@@ -29,10 +48,11 @@ services:
     image: jc21/nginx-proxy-manager:latest
     container_name: npm
     restart: unless-stopped
+    network_mode: bridge
     ports:
-      - 8080:8080
-      - 8081:8081
-      - 8443:8443
+      - 8080:80
+      - 8443:443
+      - 81:81
     environment:
       - TZ=Europe/London
       - DB_MYSQL_HOST=npmdb
@@ -49,6 +69,7 @@ services:
     container_name: maria_for_nginx
     image: yobasystems/alpine-mariadb:latest
     restart: unless-stopped
+    network_mode: bridge    
     environment:
       - TZ=Europe/London
       - MYSQL_ROOT_PASSWORD=npm
@@ -62,11 +83,12 @@ services:
     container_name: adguardhome
     image: adguard/adguardhome:latest
     restart: unless-stopped
-    ports:
+    network_mode: bridge
+    ports: 
       - 53:53/tcp
       - 53:53/udp
-      - 82:80/tcp    # The main web dashboard (post-setup)
-      - 83:3000/tcp  # The initial setup wizard (collision-proofed)
+      - 82:80/tcp
+      - 83:3000/tcp  
     volumes:
       - aghconfig:/opt/adguardhome/conf
       - aghwork:/opt/adguardhome/work
@@ -76,7 +98,8 @@ services:
   cloudflared:
     image: cloudflare/cloudflared:latest
     container_name: cloudflared
-    restart: always
+    restart: unless-stopped
+    network_mode: bridge    
     command: tunnel run
     environment:
       - TUNNEL_TOKEN=${CLOUDFLARE_TOKEN}
@@ -92,3 +115,4 @@ volumes:
   npmdata:
   letsencrypt:
   npmdb:
+  vw-data: