Nuking docker-compose data/ directory does not completely reset vaultwarden?

[WillNilges]

Hello, I've got a vaultwarden instance configured with an almost-bog-standard docker-compose as in the README.

services:
  vaultwarden:
    image: vaultwarden/server@sha256:84fd8a47f58d79a1ad824c27be0a9492750c0fa5216b35c749863093bfa3c3d7
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      DOMAIN: "https://vault.example.com"
    env_file: .env
    volumes:
      - "/home/wilnil/app_storage/vaultwarden/data:/data"
    expose:
      - 80
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.port=80"
        # with HTTPS
      - "traefik.http.routers.vaultwarden.rule=Host(`vault.example.com`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls=true"
        # Redirect insecure traffic
      - "traefik.http.routers.vaultwarden-insecure.rule=Host(`vault.example.com`)"
      - "traefik.http.routers.vaultwarden-insecure.entrypoints=web"
      - "traefik.http.middlewares.vaultwarden-https.redirectscheme.scheme=https"
      - "traefik.http.routers.vaultwarden-insecure.middlewares=vaultwarden-https@docker"
      - "traefik.docker.network=traefik-net"

networks:
  traefik:
    external: true
    name: traefik-net

I wanted to test my backups, so I added some passwords, spun down my vaultwarden, erased my data directory (sudo rm -rf /home/wilnil/app_storage/vaultwarden/) and re-deployed my instance. I was shocked to find that it was asking for my master password! I entered the master password, and it let me in, but my passwords are gone.

This is concerning, because it seems to imply that my passwords are stored in the data/ directory, which is great, that means they are backed up, but then there's configuration... 👋🏻 elsewhere 👋🏻 that I don't know about, and is almost certainly not backed up.

Does anyone have any idea what is going on?

[WillNilges]

Weird, it seems like my browser might have been caching. This is a bit concerning, because it appeared to allow me to log in.