music stack and general improvements

project/service/vaultwarden/vaultwarden.yml

@@ -3,7 +3,7 @@ services:
     extends:
       file: ${TEMPLATES_PATH}
       service: default
-    image: vaultwarden/server:latest 
+    image: vaultwarden/server
     container_name: vaultwarden 
     ports:
       - 4018:80
@@ -11,10 +11,15 @@ services:
       - ip6net
     environment:
       DOMAIN: "https://vaultwarden.${PUBLIC_DOMAIN}"
-      SIGNUPS_ALLOWED: false
+      SIGNUPS_ALLOWED: false 
       INVITATIONS_ALLOWED: false
+      SSO_ENABLED: false # for now sso does only help companies for role management and the master password is still necessary 
+      SSO_ONLY: false 
+      SSO_AUTHORITY: https://auth.${PUBLIC_DOMAIN}
+      SSO_SCOPES: profile email offline_access
+      SSO_CLIENT_ID: vaultwarden
+      SSO_CLIENT_SECRET: ${VAULTWARDEN_SSO_SECRET}
     volumes:
-      # - ${SERVICE_PATH}/vaultwarden/data:/data/
       - ${EXTERNAL_STORAGE}/passwords:/data/
     labels:
       # Watchtower