updated app templates

templates/vaultwarden/.felhom.yml

@@ -0,0 +1,49 @@
+# =============================================================================
+# .felhom.yml — App metadata for felhom-controller
+# =============================================================================
+# Place alongside docker-compose.yml in each stack directory:
+#   /opt/docker/stacks/vaultwarden/.felhom.yml
+# =============================================================================
+
+# --- Display info (shown on dashboard) ---
+display_name: "Vaultwarden"
+description: "Jelszókezelő (Bitwarden-kompatibilis)"
+category: "security"
+subdomain: "vault"
+
+# --- Asset slug ---
+slug: "vaultwarden"
+
+# --- Resource hints (displayed on deploy screen) ---
+resources:
+  mem_request: "50M"
+  mem_limit: "256M"
+  pi_compatible: true
+  needs_hdd: false
+
+# --- Deploy fields ---
+deploy_fields:
+  - env_var: DOMAIN
+    label: "Domain"
+    type: domain
+    description: "A szerver domain neve"
+    locked_after_deploy: true
+
+  - env_var: ADMIN_TOKEN
+    label: "Admin panel token"
+    type: secret
+    generate: "hex:32"
+    description: "Token az admin panel eléréséhez (https://vault.<domain>/admin)"
+    locked_after_deploy: true
+
+  - env_var: SIGNUPS_ALLOWED
+    label: "Regisztráció engedélyezése"
+    type: select
+    default: "true"
+    options:
+      - value: "true"
+        label: "Igen – regisztráció engedélyezve"
+      - value: "false"
+        label: "Nem – regisztráció lezárva"
+    description: "Új fiókok regisztrálásának engedélyezése. Az első fiók létrehozása után állítsd 'Nem'-re."
+    locked_after_deploy: false

templates/vaultwarden/docker-compose.yml

@@ -1,18 +1,17 @@
 # Vaultwarden - Password Manager (Bitwarden-compatible)
 # Domain: vault.${DOMAIN}
 # Database: None (SQLite, built-in)
-# RAM: ~50MB | Pi-compatible: Yes
+# RAM: ~50MB (mem_limit: 256M) | Pi-compatible: Yes
 #
-# Environment variables (set in Portainer):
+# Environment variables:
 #   DOMAIN            - Your domain (e.g., demo-felhom.eu)
-#   ADMIN_TOKEN       - Admin panel token (optional, generate with: openssl rand -hex 32)
+#   ADMIN_TOKEN       - Admin panel token (auto-generated)
 #   SIGNUPS_ALLOWED   - Set to "false" after creating your account(s)
 #
 # First-time setup:
 #   1. Visit https://vault.${DOMAIN} and create an account
-#   2. Set SIGNUPS_ALLOWED=false in Portainer env vars
-#   3. Redeploy stack
-#   4. Admin panel at https://vault.${DOMAIN}/admin (if ADMIN_TOKEN set)
+#   2. Set SIGNUPS_ALLOWED=false via the controller
+#   3. Admin panel at https://vault.${DOMAIN}/admin (if ADMIN_TOKEN set)
 #
 # Clients:
 #   Use any Bitwarden client (desktop, mobile, browser extension)
@@ -33,6 +32,10 @@ services:
       - vaultwarden_data:/data
     networks:
       - traefik-public
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     healthcheck:
       test: ["CMD", "wget", "--spider", "-q", "http://localhost:80/alive"]
       interval: 30s
@@ -52,4 +55,4 @@ volumes:
 
 networks:
   traefik-public:
-    external: true
+    external: true