Vaultwarden websocket
reddit / selfhosted

----------------------------------------------------------------------
bisol · 2023-12-21 19:07

I have only opened vaultwarden websocket from internet to my home
network because I use my devices (laptop, iPhone) from outside.

I have disabled web interface because I think its most secure (maybe
wrong but don’t really need it).

I was thinking about closing the websocket and use it only from
internal network for secure reason but it seems bad.

Am I wrong ?
How can I check the usage of this websocket ? (Fail2ban only check web
interface usage)

----------------------------------------------------------------------
654354365476435 · 2023-12-21 22:37

You are talking about port forwarding? If so then yea, you should
close it, its worst way to do this.


The best is your vpn, other cool option is cloudflare argo tunnel that
offers a lot more security then open port.

----------------------------------------------------------------------
sk1nT7 · 2023-12-22 03:11

Btw the latest vaultwarden image combines the frontend as well as
websockets to a single port nowadays. The older port 3012 or what it
was is deprecated and will be removed.

So your setup exposing only the websockets port will soon not work
anymore. Use a VPN instead, to securely access your instance from
anywhere.

----------------------------------------------------------------------
SammyDavidJuniorJr · 2023-12-22 06:55

Websockets start as regular old HTTP requests so they show up in your
normal web logs.