- Mount /var/lib/vaultwarden/data as /data with :Z restored; podman
refuses to relabel a volume path that equals $HOME
- Use /var/lib/vaultwarden as service HOME (rootless podman storage
stays in .config/.local, outside the mounted data/ subdir)
- Data location matches the native vaultwarden package
(WorkingDirectory=/var/lib/vaultwarden, relative DATA_FOLDER=data)
- Sync vaultwarden.cfg with the native 1.36.0 template
- Add Conflicts: vaultwarden (shared user, config, unit name, state dir)