vaultwarden: remap DATABASE_URL secret to versioned name (vaultwarden_database_url_v2), same in-container target path. Fixes rotation being silently blocked by Swarm (cannot rm a secret referenced by a running service).

2026-07-27 08:50:43 -07:00
parent 6ff6260b2f
commit 9447b277a1
1 changed files with 3 additions and 2 deletions
@@ -40,7 +40,8 @@ services:
      - "/volume1/docker/Vaultwarden/data:/data"
    secrets:
      - vaultwarden_admin_token
-      - vaultwarden_database_url
+      - source: vaultwarden_database_url_v2
+        target: vaultwarden_database_url
    working_dir: "/"
    deploy:
      labels:
@@ -59,7 +60,7 @@ services:
 secrets:
  vaultwarden_admin_token:
    external: true
-  vaultwarden_database_url:
+  vaultwarden_database_url_v2:
    external: true

 networks: