vaultwarden: remap DATABASE_URL secret to versioned name (vaultwarden_database_url_v2), same in-container target path. Fixes rotation being silently blocked by Swarm (cannot rm a secret referenced by a running service).

vaultwarden/vaultwarden.yaml

@@ -40,7 +40,8 @@ services:
       - "/volume1/docker/Vaultwarden/data:/data"
     secrets:
       - vaultwarden_admin_token
-      - vaultwarden_database_url
+      - source: vaultwarden_database_url_v2
+        target: vaultwarden_database_url
     working_dir: "/"
     deploy:
       labels:
@@ -59,7 +60,7 @@ services:
 secrets:
   vaultwarden_admin_token:
     external: true
-  vaultwarden_database_url:
+  vaultwarden_database_url_v2:
     external: true
 
 networks: