Page 1 of 1

Problem using vaultwarden / reverse proxy

Posted: Sat 24. May 2025, 23:58
by BratHuhn
Hi Guys,

I am trying to bring up vaultwarden via docker. I have therefor created a subdomain under xx.yy.de with the following apache settings

Code: Select all

<IfModule mod_proxy.c>
        ProxyPass /.well-known/acme-challenge !
</IfModule>

Alias /.well-known/acme-challenge /home/keyhelp/www/.well-known/acme-challenge

ProxyPass / http://127.0.0.1:8100/ upgrade=websocket
ProxyPassReverse / http://127.0.0.1:8100/
The container ist started with the following docker-compose file:

Code: Select all

version: '3.3'

services:
  vaultwarden:
    image: vaultwarden/server:1.33.2
    ports:
        - '8100:80'
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: "https://xx.yy.de"
      TZ: "Europe/Berlin"
    volumes:
      - /opt/vaultwarden/vw-data/:/data
In the logs of vaultwarden I can see that the webserver is started but no calls are comming in when trying to access xx.yy.de.
I can see that the container is healthy running

Code: Select all

ab559c71fdf7   vaultwarden/server:1.33.2           "/start.sh"              About a minute ago   Up About a minute (healthy)   0.0.0.0:8100->80/tcp, [::]:8100->80/tcp                                                vaultwarden
Logs of the keyhelp domain

Code: Select all

 (104)Connection reset by peer: [remote xx.xx.xx.xx:60368]AH01102: error reading status line from remote server 127.0.0.1:8100
AH02218: ssl_stapling_init_cert: no OCSP URI in certificate and no SSLStaplingForceURL set [subject: CN=xx.yy.de / issuer: CN=R10,O=Let's Encrypt,C=US / serial: 060A0FCFE3FAF368BB3D86EFC0AB3D214 / notbefore: May 24 20:41:38 2025 GMT / notafter: Aug 22 20:41:37 2025 GMT] 
Any idea what might be a problem? Running several other docker container with "same" settings but different ports without any issue.

Thanks in advance

Re: Problem using vaultwarden / reverse proxy

Posted: Mon 26. May 2025, 10:34
by Florian
Hallo,

if your application is running SSL under the port you have to do a SSL Proxy Forwarding, you cannot connect with http in this case, only with https