feat(vaultwarden): deploy Vaultwarden password manager and daily NAS backup

stacks/azure-edge/Caddyfile

@@ -30,3 +30,11 @@ agy.961504.xyz:443 {
     }
     reverse_proxy 100.108.205.40:7681
 }
+
+# 5. Vaultwarden 私人密码保险箱 (443 免端口访问) -> https://vw.961504.xyz
+vw.961504.xyz:443 {
+    encode zstd gzip
+    reverse_proxy 100.108.205.40:8222 {
+        header_up X-Real-IP {remote_host}
+    }
+}

stacks/gateway/Caddyfile

@@ -58,3 +58,12 @@ agy.home.961504.xyz:10443 {
     }
     reverse_proxy 127.0.0.1:7681
 }
+
+# 6. Vaultwarden 私人密码保险箱 (https://vw.home.961504.xyz:10443)
+vw.home.961504.xyz:10443 {
+    tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
+    encode zstd gzip
+    reverse_proxy 127.0.0.1:8222 {
+        header_up X-Real-IP {remote_host}
+    }
+}

stacks/vaultwarden/docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  vaultwarden:
+    image: vaultwarden/server:latest
+    container_name: vaultwarden
+    restart: unless-stopped
+    environment:
+      - DOMAIN=https://vw.961504.xyz
+      - SIGNUPS_ALLOWED=true
+      - WEBSOCKET_ENABLED=true
+      - ADMIN_TOKEN=k10y15ZXC.
+      - TZ=Asia/Shanghai
+    volumes:
+      - ./data:/data
+    ports:
+      - "8222:80"