v1.36.0-2: fix SELinux volume relabel, align layout with native package
- Mount /var/lib/vaultwarden/data as /data with :Z restored; podman refuses to relabel a volume path that equals $HOME - Use /var/lib/vaultwarden as service HOME (rootless podman storage stays in .config/.local, outside the mounted data/ subdir) - Data location matches the native vaultwarden package (WorkingDirectory=/var/lib/vaultwarden, relative DATA_FOLDER=data) - Sync vaultwarden.cfg with the native 1.36.0 template - Add Conflicts: vaultwarden (shared user, config, unit name, state dir)
This commit is contained in:
@@ -6,11 +6,11 @@ ContainerName=vaultwarden
|
||||
Image=docker.io/vaultwarden/server:1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c
|
||||
EnvironmentFile=/etc/vaultwarden/vaultwarden.cfg
|
||||
PublishPort=127.0.0.1:8000:80
|
||||
Volume=/var/lib/vaultwarden-container:/data:Z
|
||||
Volume=/var/lib/vaultwarden/data:/data:Z
|
||||
Volume=/etc/localtime:/etc/localtime:ro
|
||||
|
||||
[Service]
|
||||
User=vaultwarden
|
||||
Environment=HOME=/var/lib/vaultwarden-container
|
||||
Environment=HOME=/var/lib/vaultwarden
|
||||
Restart=on-failure
|
||||
RestartSec=5s
|
||||
|
||||
Reference in New Issue
Block a user