diff --git a/password-manager/docker-compose.yml b/password-manager/docker-compose.yml
index a39ee7d..60cd524 100644
--- a/password-manager/docker-compose.yml
+++ b/password-manager/docker-compose.yml
@@ -5,20 +5,51 @@ services:
     networks:
       - pangolin
     environment:
-      DOMAIN: ${DOMAIN}
+      DOMAIN: "https://${DOMAIN}"
       ADMIN_TOKEN: ${VAULTWARDEN_ADMIN_TOKEN}
     volumes:
       - /mnt/user/appdata/vaultwarden/data:/data/
     labels:
       net.unraid.docker.icon: "https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/bitwarden.png"
-      net.unraid.docker.webui: "${DOMAIN}"
+      net.unraid.docker.webui: "https://${DOMAIN}"
       folder.view2: "Services"
 
+      pangolin.public-resources.vaultwarden-server.name: "${RESOURCE_NAME}"
+      pangolin.public-resources.vaultwarden-server.full-domain: "${DOMAIN}"
+      pangolin.public-resources.vaultwarden-server.protocol: "http"
+
+      pangolin.public-resources.vaultwarden-server.auth.sso-enabled: true
+      pangolin.public-resources.vaultwarden-server.auth.sso-roles[0]: "Member"
+
+      pangolin.public-resources.vaultwarden-server.targets[0].method: "http"
+
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.enabled: true
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.hostname: "vaultwarden"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.port: 80
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.path: "/api/alive"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.method: "GET"
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.status: 200
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.interval: 30
+      pangolin.public-resources.vaultwarden-server.targets[0].healthcheck.timeout: 5
+
+      pangolin.public-resources.vaultwarden-server.rules[0].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[0].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[0].value: "/api/*"
+      pangolin.public-resources.vaultwarden-server.rules[1].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[1].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[1].value: "/identity/*"
+      pangolin.public-resources.vaultwarden-server.rules[2].action: "allow"
+      pangolin.public-resources.vaultwarden-server.rules[2].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[2].value: "/wl/*"
+      pangolin.public-resources.vaultwarden-server.rules[3].action: "deny"
+      pangolin.public-resources.vaultwarden-server.rules[3].match: "path"
+      pangolin.public-resources.vaultwarden-server.rules[3].value: "/admin/*"
+
       # HOMEPAGE
       homepage.group: Security
-      homepage.name: Vaultwarden
+      homepage.name: "${RESOURCE_NAME}"
       homepage.icon: vaultwarden.png
-      homepage.href: "${DOMAIN}"
+      homepage.href: "https://${DOMAIN}"
       homepage.description: Password Manager
 
 networks: