v1.36.0-2: fix SELinux volume relabel, align layout with native package

- Mount /var/lib/vaultwarden/data as /data with :Z restored; podman
  refuses to relabel a volume path that equals $HOME
- Use /var/lib/vaultwarden as service HOME (rootless podman storage
  stays in .config/.local, outside the mounted data/ subdir)
- Data location matches the native vaultwarden package
  (WorkingDirectory=/var/lib/vaultwarden, relative DATA_FOLDER=data)
- Sync vaultwarden.cfg with the native 1.36.0 template
- Add Conflicts: vaultwarden (shared user, config, unit name, state dir)
This commit is contained in:
2026-07-13 11:13:11 +02:00
parent 816eea3662
commit 6d606ee37b
3 changed files with 188 additions and 39 deletions
+2 -2
View File
@@ -6,11 +6,11 @@ ContainerName=vaultwarden
Image=docker.io/vaultwarden/server:1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c
EnvironmentFile=/etc/vaultwarden/vaultwarden.cfg
PublishPort=127.0.0.1:8000:80
Volume=/var/lib/vaultwarden-container:/data:Z
Volume=/var/lib/vaultwarden/data:/data:Z
Volume=/etc/localtime:/etc/localtime:ro
[Service]
User=vaultwarden
Environment=HOME=/var/lib/vaultwarden-container
Environment=HOME=/var/lib/vaultwarden
Restart=on-failure
RestartSec=5s