v1.37.1: update to vaultwarden 1.37.1

- Bump image to docker.io/vaultwarden/server:1.37.1 (new digest)
- Security fixes upstream: SSRF via icon endpoint, cross-org cipher
  access, org policy bypass, WebSocket DDoS; invite fixes in 1.37.1
- Sync vaultwarden.cfg with upstream 1.37.1 .env.template

vaultwarden-container.spec

@@ -1,6 +1,6 @@
 Name:           vaultwarden-container
-Version:        1.36.0
-Release:        2%{?dist}
+Version:        1.37.1
+Release:        1%{?dist}
 Summary:        Vaultwarden - Bitwarden compatible server (container)
 License:        AGPL-3.0
 Group:          System Environment/Base
@@ -78,6 +78,12 @@ fi
 %dir %attr(0750,vaultwarden,vaultwarden) %{_sharedstatedir}/vaultwarden/data
 
 %changelog
+* Mon Aug 10 2026 Zoran Pericic <zpericic@netst.org> - 1.37.1-1
+- Update to 1.37.1 (security fixes: SSRF via icon endpoint, cross-org
+  cipher access, org policy bypass, WebSocket DDoS; invite fixes)
+- Sync vaultwarden.cfg with the 1.37.1 template (IP_HEADER_TRUSTED_PROXIES,
+  UNAUTHENTICATED_RATELIMIT_*, sqlite:// DATABASE_URL scheme)
+
 * Mon Jul 13 2026 Zoran Pericic <zpericic@netst.org> - 1.36.0-2
 - Match native vaultwarden layout: data in /var/lib/vaultwarden/data
 - Use /var/lib/vaultwarden as service HOME (rootless podman storage);