py-cookiecutter-templates/docker-compose/examples/hashicorpvault/compose.yaml

services:
    vault:
        # FIXME image name with or without slash? Docker Hub or private registry? With or without *_BUILD_DATE? FIXME
        image: "registry.example.com/project/vault:${VAULT_BUILD_DATE}-${VAULT_VERSION}"
        container_name: "vault-${CONTEXT}"
        networks:
            vault-default:
        ulimits:
            nproc: ${ULIMIT_NPROC:-65535}
            nofile:
                soft: ${ULIMIT_NPROC:-65535}
                hard: ${ULIMIT_NPROC:-65535}
        extends:
            file: common-settings.yaml
            service: common-settings
        ports:
            # - "8080:80"
        volumes:
            # When changing bind mount locations to real ones remember to
            # also update "Initial setup" section in README.md.
            # - /opt/docker-data/vault-${CONTEXT}/vault/data/db:/usr/lib/vault
            # - /opt/docker-data/vault-${CONTEXT}/vault/data/logs:/var/log/vault
            # - /opt/docker-data/vault-${CONTEXT}/vault/config:/etc/vault
        environment:
            # VAULT_USER: ${VAULT_USER}
            # VAULT_PASSWORD: ${VAULT_PASSWORD}
networks:
    vault-default:
        name: vault-${CONTEXT}
        driver: bridge
        driver_opts:
            com.docker.network.enable_ipv6: "false"
        ipam:
            driver: default
            config:
                - subnet: ${SUBNET}