updated app templates

templates/vaultwarden/docker-compose.yml

@@ -1,18 +1,17 @@
 # Vaultwarden - Password Manager (Bitwarden-compatible)
 # Domain: vault.${DOMAIN}
 # Database: None (SQLite, built-in)
-# RAM: ~50MB | Pi-compatible: Yes
+# RAM: ~50MB (mem_limit: 256M) | Pi-compatible: Yes
 #
-# Environment variables (set in Portainer):
+# Environment variables:
 #   DOMAIN            - Your domain (e.g., demo-felhom.eu)
-#   ADMIN_TOKEN       - Admin panel token (optional, generate with: openssl rand -hex 32)
+#   ADMIN_TOKEN       - Admin panel token (auto-generated)
 #   SIGNUPS_ALLOWED   - Set to "false" after creating your account(s)
 #
 # First-time setup:
 #   1. Visit https://vault.${DOMAIN} and create an account
-#   2. Set SIGNUPS_ALLOWED=false in Portainer env vars
-#   3. Redeploy stack
-#   4. Admin panel at https://vault.${DOMAIN}/admin (if ADMIN_TOKEN set)
+#   2. Set SIGNUPS_ALLOWED=false via the controller
+#   3. Admin panel at https://vault.${DOMAIN}/admin (if ADMIN_TOKEN set)
 #
 # Clients:
 #   Use any Bitwarden client (desktop, mobile, browser extension)
@@ -33,6 +32,10 @@ services:
       - vaultwarden_data:/data
     networks:
       - traefik-public
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     healthcheck:
       test: ["CMD", "wget", "--spider", "-q", "http://localhost:80/alive"]
       interval: 30s
@@ -52,4 +55,4 @@ volumes:
 
 networks:
   traefik-public:
-    external: true
+    external: true