From 9447b277a1b7668449cd0604ba512f48732121a9 Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Mon, 27 Jul 2026 08:50:43 -0700
Subject: [PATCH] vaultwarden: remap DATABASE_URL secret to versioned name
 (vaultwarden_database_url_v2), same in-container target path. Fixes rotation
 being silently blocked by Swarm (cannot rm a secret referenced by a running
 service).

---
 vaultwarden/vaultwarden.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/vaultwarden/vaultwarden.yaml b/vaultwarden/vaultwarden.yaml
index 3330846..84e9a8f 100644
--- a/vaultwarden/vaultwarden.yaml
+++ b/vaultwarden/vaultwarden.yaml
@@ -40,7 +40,8 @@ services:
       - "/volume1/docker/Vaultwarden/data:/data"
     secrets:
       - vaultwarden_admin_token
-      - vaultwarden_database_url
+      - source: vaultwarden_database_url_v2
+        target: vaultwarden_database_url
     working_dir: "/"
     deploy:
       labels:
@@ -59,7 +60,7 @@ services:
 secrets:
   vaultwarden_admin_token:
     external: true
-  vaultwarden_database_url:
+  vaultwarden_database_url_v2:
     external: true
 
 networks: