- Mount /var/lib/vaultwarden/data as /data with :Z restored; podman refuses to relabel a volume path that equals $HOME - Use /var/lib/vaultwarden as service HOME (rootless podman storage stays in .config/.local, outside the mounted data/ subdir) - Data location matches the native vaultwarden package (WorkingDirectory=/var/lib/vaultwarden, relative DATA_FOLDER=data) - Sync vaultwarden.cfg with the native 1.36.0 template - Add Conflicts: vaultwarden (shared user, config, unit name, state dir)
17 lines
473 B
INI
17 lines
473 B
INI
[Unit]
|
|
Description=Vaultwarden - Bitwarden compatible server
|
|
|
|
[Container]
|
|
ContainerName=vaultwarden
|
|
Image=docker.io/vaultwarden/server:1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c
|
|
EnvironmentFile=/etc/vaultwarden/vaultwarden.cfg
|
|
PublishPort=127.0.0.1:8000:80
|
|
Volume=/var/lib/vaultwarden/data:/data:Z
|
|
Volume=/etc/localtime:/etc/localtime:ro
|
|
|
|
[Service]
|
|
User=vaultwarden
|
|
Environment=HOME=/var/lib/vaultwarden
|
|
Restart=on-failure
|
|
RestartSec=5s
|