Nginx Proxy Manager VS vaultwarden

Load Balancer: NPM Static IP VPN: PureVPN Proxy Server: CCProxy

As far as website hosting, just set up a few Docker containers: one for a web-server of your choice, and one for a reverse proxy. I recommend Nginx Proxy Manager. It handles SSL certificates for you in a super simple way (both the initial acquisition process as well as auto renewal) and makes it easy to expand to using multiple web servers in the future, or setting up redirects without filling up your DNS records.

Feel like Christian Lempa is being a bit too lenient with the developer of Nginx Proxy Manager. jc21's handling of reported vulnerability was poor. 10 months to fix and then simply including it in the list of changes for v2.9.20 without publishing a security advisory. Not great. And to make matters worse, the project still doesn't have a security policy.

Docker runs on the 3B+ so you could use this [Github] or the one I have deployed here [NGINX Proxy Manager site] amongst others.

UPDATE: Hello everyone, finally after doing some research about reverse proxies I have found a way of adding https to my webapps. I found this service called https://nginxproxymanager.com/ and followed the tutorial on their website its pretty easy. Thanks for your help guys!!

Is Reverse Proxy enough to be safe? I was thinking about trying Nginx Proxy Manager. Also... Do I also have to separately setup Nginx before installing the Proxy Manager?

For a few TB of data you have many options. I use a Beelink Mini S12 with a 4TB SSD and a 2TB NVMe in it. It is powerful enough to run several services and stream photos and video to my phone, desktop, and TV (using an Amazon Fire Stick on the TV). I use Photoprism and Jellyfin for that. I access it remotely using Tailscale. It helps if you own a domain so you can setup SSL certs. I have devpl.us and home.devpl.us points to my server.

The SSL certificate for my wildcard domain is currently managed by the acme.sh script running as a Docker container until the issue with NPM and Azure DNS certificate management is resolved.

I recently had trouble getting an SSL cert, but I found this PR and it already has an image and it works for me. I use Tailscale and my network isn't visible from the internet so I use the DNS Challenge option with GoDaddy and an API key.

For this I self-host vaultwarden (https://github.com/dani-garcia/vaultwarden), an implementation of the bitwarden server, on my raspberry pi at home (and back up the DB frequently). It works well enough for me, and doesn't have my stuff stored in a single company's cloud.

Self hosting is incredibly easy with vaultwarden (https://github.com/dani-garcia/vaultwarden)

I have now switched to using the BitWarden app with the self-hosted VaultWarden server. I have set it up, so my passwords are only accessible when connected to my home network either physically or with a VPN (I am using tailscale for this).

There are solutions external to the browsers that work pretty well and where you have control on your data :

Floccus for bookmarks (https://floccus.org/) : it works also on mobile devices : a great plus ! You need only a webdav server (or a Nextcloud account), I use Dave (https://github.com/micromata/dave)

Vaultwarden for the passwords (https://github.com/dani-garcia/vaultwarden)

A huge advantage of this solution is that you can have synchronization also between different browsers and on mobile devices.

And it also seems like vaultwarden has no interest in implementing the functionality?

I don't get why they don't do a clean-room implementation if they're so worried about licenses..

https://github.com/dani-garcia/vaultwarden/discussions/3368

Vaultwarden does not implement the secrets manager. It does implement the password manager.

Vaultwarden does not have 100% of all the features that Bitwarden has. To name an example, SSO is missing: https://github.com/dani-garcia/vaultwarden/pull/3154

Proton Pass or BitWarden VaultWarden](https://github.com/dani-garcia/vaultwarden)

Bitwarden / Vaultwarden

I have nginx-proxy docker container on top of vaultwarden - there aren't any alias directives there. Vaultwarden itself appears to use rust with some http framework called "rocket" [1]. Sorry I'm not familiar with rust world.

But anyways, said vuln doesn't apply to vaultwarden.

[1] https://github.com/dani-garcia/vaultwarden/blob/19e671ff25bf...

You would have to set up and manage your own server (which you probably shouldn't do if you don't at least have a modicum of sysadmin experience). Syncing would still only happen via network, local in that case. I'm unsure about your "wire" condition - USB is out of the question but you don't literally require a wire to be involved, right? Because of you did, you'd have to connect some kind of ethernet dongle/dock to you mobile device instead of connecting regularly via WLAN.