refactor: rewrite vaultwarden_dev to match template conventions

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

vaultwarden_dev/sample.env

@@ -1,17 +1,22 @@
-# VaultWarden
-PRODDIR=/var/www/stashdomain-com/ #HELP: project_path
-COOKBOOK=/home/user/git/docker-compose-cookbooks #HELP: cookbooks
-VOL_PATH=/project-dir/project-name/data #HELP: volpath
-# VaultWarden Container
-VAULT_DOMAIN_NAME=www.YourDomain.com
-VAULT_IMAGE=vaultwarden/server:1.31.0
-WEBSOCKET_ENABLED=true # Enable WebSocket notifications
-SIGNUPS_ALLOWED=false # Disable new user signups
-VAULT_ADMIN_TOKEN=01234567890123456790123456790123456789012345678 #HELP: gen32
-# SMTP
-SMTP_HOST=smtp.domain.tld
-SMTP_FROM=vaultwarden@domain.tld
-SMTP_PORT=587
-SMTP_SECURITY=starttls
-SMTP_USERNAME=username
-SMTP_PASSWORD=password
+VAULT_IMAGE=vaultwarden/server:latest
+VAULT_RESTART=unless-stopped
+VOL_PATH=/data
+VAULT_PORT=8083
+
+# Public URL (set to your proxy domain; clients require https)
+VAULT_DOMAIN=http://localhost:8083
+
+# Keep signups disabled; invite users via the admin page instead
+VAULT_SIGNUPS_ALLOWED=false
+
+# Admin page token — generate with: openssl rand -base64 48
+# Leave unset to disable the /admin page entirely
+VAULT_ADMIN_TOKEN=changeme-to-a-long-random-string
+
+# SMTP (optional — set all of these or none)
+# SMTP_HOST=smtp.domain.tld
+# SMTP_FROM=vaultwarden@domain.tld
+# SMTP_PORT=587
+# SMTP_SECURITY=starttls
+# SMTP_USERNAME=username
+# SMTP_PASSWORD=password