Can AI replace Bitwarden?

Build me a self-hosted password vault to replace hosted Bitwarden Premium.
Requirements:

- Do not write a password manager. Deploy vaultwarden (the Bitwarden-compatible
  server) on my VPS: a docker-compose.yml with the vaultwarden/server image
  and a data volume at ./vw-data.
- Front it with Caddy for automatic HTTPS on a subdomain I give you; the
  browser and mobile clients require HTTPS to work at all.
- Lock it down after I register my one account: SIGNUPS_ALLOWED=false, admin
  token in .env, nothing else exposed.
- Clients are the official Bitwarden apps and extensions pointed at my server
  URL. That is the point: autofill, mobile, and passkeys keep working.
- Nightly backup cron job: tar vw-data, encrypt it with age, copy it off the
  box. Write restore.sh and make me run one restore drill before trusting it.
- Import my existing vault with the standard Bitwarden export/import flow.
- Out of scope: emergency access, org and family sharing, and pretending I
  have a security team. Note in the README: clients cache the vault, so a
  dead server locks me out of nothing, but I now own updates and patching
  forever.
- README: compose up, first-account creation, update procedure, and the
  restore drill.