Security
Vaultwarden
Runs Vaultwarden and a Caddy proxy as Docker containers. Caddy gets a Let's Encrypt certificate for your domain on ports 80 and 443. Setup creates the domain's DNS record when it can; otherwise point it at this server yourself.
What it does
Security Tool Installers
What you will be asked
You fill these in during setup.
- Domain name RequiredThe domain for your vault, for example vault.example.com. Its DNS A record must point to this server: Setup creates it in your DNS when it can, otherwise add it yourself; the browser vault only works over HTTPS.
- Email for certificate notices OptionalOptional. Let's Encrypt uses it to warn you about certificate problems.
- Allow new sign-ups RequiredAdvanced settingsWhen true, anyone who knows the address can create an account. Turn it off after you and your people have registered (run this tool again with false).
- Enable the admin panel RequiredAdvanced settingsWhen true, the /admin page is enabled and its token is written to /opt/iranux/vaultwarden/admin_token (root only); the settings file keeps only a hash of it. When false the admin page is off.