Vaultwarden
vlatest
Lightweight Bitwarden-compatible password manager server
What's included
- Vaultwarden (Bitwarden-compatible server with Web Vault)
- Docker container with automatic restarts
- PostgreSQL database
- Caddy web server with auto-HTTPS
- WebSocket notifications for real-time sync
- Admin panel for user and org management
After install
- Open the URL shown and create your first account via the admin panel
- Sign-ups are disabled -- use /admin to invite users
- Install Bitwarden clients and point them to your server URL
- IP-only installs get a self-signed certificate (browser warning is expected)
- Custom domain: VAULTWARDEN_HOST=vault.example.com
How the install works
Generated from the install script itself -- these are the exact phases it runs on your server.
- 1.Pre-flight checks
- 2.Opening firewall
- 3.Installing system dependencies
- 4.Installing Docker
- 5.Installing Caddy
- 6.Setting up PostgreSQL
- 7.Starting Vaultwarden
- 8.Configuring Caddy
Supported Operating Systems
Ubuntu 24Ubuntu 25Debian 12Debian 13Rocky 9Rocky 10Alma 9Alma 10
Requirements
- RAM
- 512MB minimum
- Disk
- 5GB minimum
Configuration
| Variable | Default | Description |
|---|---|---|
| VAULTWARDEN_HOST | server hostname | Domain name or IP. Domains get auto-HTTPS via Let's Encrypt. |
| VAULTWARDEN_ADMIN_TOKEN | random 48-char | Token for the /admin panel |
| VAULTWARDEN_DB_PASS | random 24-char | PostgreSQL password |
4 installsOfficial website →
Changelog
v1.0.12026-07-12
- IP and non-resolving hosts now get HTTPS with a self-signed certificate (the web vault requires a secure context)
- PostgreSQL ordered after Docker so the database survives reboots
- Warn when ADMIN_TOKEN cannot be argon2-hashed
v1.0.02026-04-02
- Initial release with Docker + PostgreSQL
- Caddy reverse proxy with auto-HTTPS
- WebSocket notifications for real-time sync
- Admin panel with argon2-hashed token
- Sign-ups disabled by default