Hello,
I’m a new user of Bitwarden_RS.
I installed it on my Synology with Docker, using the DSM Reverse Proxy to access my Bitwarden vault. I enabled the websocket notifications (and use a script to let this pass through the reverse proxy).
Everything seems to be working great.
But for all my local ressources, with a LAN IP, like 192.168.xxx.xxx, there is no icons !
For all my other entries, with a domaine name, no problem, the icons are there.
The option to disable icon download isn’t set to true :
I search here and in the documentation, and I found this :
And my settings about this are :
Is it safe to set this to false ? What does this imply if I set it to false ?
Another thing : In my icon_cache folder, I try to set some custom icon for my lan IP :
But all I get is no icon, and a .miss file.
I understand that the missing icon in the vault could be solved by the setting I talked about juste above, but why do a .miss file appear ?
If I delete those files, they re-appear…
Thanks for your help.
If you uncheck the checkbox and save you should be able to get those icons. Also, remove the .miss files first.
Then, it could still happen that we aren’t able to extract an icon from those ip’s. For example if there is a basic auth login infront of it. That will create a .miss again.
You probably also want to clear your browser cache, since it could be that it keeps those missed icons in the cache for a while.
Thanks for the quick reply
There is somehow a warning in the .env template file.
Is it important for security to uncheck this checkbox ? (I’ll plan to add it to my docker-compose file )
And for the ip for witch there is no icon, would it work if I put a custom icon in the icon_cache folder ?
Thanks again
Well the reason we have it enabled by default is we do not want by default to allow possible attackers to check your home lan for endpoints they maybe could abuse. Though, probably hard to do, but in theory if someone knows a specific service within your lan which has some kind of XSS bug, they could try to abuse that.
So, enabling shouldn’t cause much harm.
Regarding the custom icons, that should be possible, but keep in mind that the icon’s are refreshed after x time, and thus they will get either replaced, or removed.
Hello,
After many try, adding manually the icon png in cahe folder doesn’t work at all. I always have a .miss file instead of using the actual PNG… even after deleting all files in the cache folder.
The log file show this :
[2021-04-12 16:17:08.292][bitwarden_rs::api::icons][WARN] Download failed for https://192.168.2.200/favicon.ico
[2021-04-12 16:17:08.320][bitwarden_rs::api::icons][WARN] Download failed for http://192.168.2.200/favicon.ico
[2021-04-12 16:17:08.320][bitwarden_rs::api::icons][ERROR] Empty response
[2021-04-12 16:17:08.320][bitwarden_rs::api::icons][ERROR] Error downloading icon: Empty response
[2021-04-12 16:18:39.580][bitwarden_rs::api::icons][WARN] Download failed for https://192.168.2.200/favicon.ico
[2021-04-12 16:18:39.585][bitwarden_rs::api::icons][WARN] Download failed for http://192.168.2.200/favicon.ico
[2021-04-12 16:18:39.585][bitwarden_rs::api::icons][ERROR] Empty response
[2021-04-12 16:18:39.585][bitwarden_rs::api::icons][ERROR] Error downloading icon: Empty response
[2021-04-12 16:21:46.424][bitwarden_rs::api::icons][WARN] Download failed for https://192.168.2.200/favicon.ico
[2021-04-12 16:21:46.429][bitwarden_rs::api::icons][WARN] Download failed for http://192.168.2.200/favicon.ico
[2021-04-12 16:21:46.430][bitwarden_rs::api::icons][ERROR] Empty response
[2021-04-12 16:21:46.430][bitwarden_rs::api::icons][ERROR] Error downloading icon: Empty response
I must abandon this idea…
Thanks for the help.