If anything goes well, stop them and run as detached with the following command.Bitwarden is a free and open-source password management (password manager) service that stores sensitive information such as website credentials in an encrypted vault. Test it using the same docker-compose -f docker-compose_bitwarden-caddy.yml up as previously. Review all the settings and environment varaibles in the. Once setup is finished, you're ready to launche your ' production' server. Shutdown the servers issuing a ctrl + C in the terminal Startup and Maintenance Startup Once finished disable the access to admin panel from itself.ĭo not forget to install the clients for desktops, browers and mobile. Test the accesses and start the Birwarden_RS fine tune at. If everything goes well, the prompt will let you know the containers are started and wait until a ctrl + C is triggered to stop them. Ready for a first run : docker-compose -f docker-compose_bitwarden-caddy.yml up.

Pull needed images docker-compose -f docker-compose_bitwarden-caddy.yml pull.Gain root using sudo -i with your admin password.Connect your admin account with password.Make sure webstation is running with a dummy page to be served.In Custom Headers tab, click the drop down list next to add button and choose websockets.Go to Settings > Application Portal > Reverse proxy.You'll need to disable the admin panel from itself. Beware, if accessed once, it will be enabled in /data/config.json whatever are the Environment variables. You will first need to access the admin page to fine tune the Vaultwarden server. Copy this repo content to /volumeX/docker/.Unzip and review docker-compose_bitwarden-caddy.yml settings.Folder used : /volumeX/docker/ to be personnalized to your DSM setup.This part is off-topic here.Īs convention, we will use as example the following A domain name with Let's Encrypt certs enabled.This is the reason why Vaultwarden server is not set to use SSL because behind 2 proxies.ĭespite this has been made to run on Synology NAS, this should run on other systems with / without minor adaptations. We will use the embedded reverse proxy and forward the request on some other ports. Synology do not allow advanced setting of their Nginx reverse proxy and ports 80/443 are not free. This is the reason why caddy server is used to enable the websocket notifications. The goal is to keep the Synology NAS system untouched to be upgrade-proof. This setup provides a Vaultwarden server with support of websocket notifications. Docker Vaultwarden proxified for Synology NASĪ docker-compose ready package to run Vaultwarden proxified with Caddy server.

Bitwarden docker synology