Paul R Kartchner
2978707a71
signups_allowed was drifted to true on prod and is now false in both docker-compose.yml and data/config.json. config.json overrides the env var, so setting the compose value alone has no effect. The bouncer moved from @file to @docker because its API key is now a compose label sourced from .env, keeping config.yml secret-free. The vaultwarden-http router is removed as redundant: traefik.yml already redirects the http entrypoint to https globally (verified: http returns 301).