# Option Vaultwarden offline for vpn & LAN/Intranet

**URL:** <https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409>\
**Category:** Feature Requests\
**Created:** [January 21, 2022, 6:29pm UTC](https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409 "2022-01-21T18:29:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![EdvonSchleck](https://avatars.discourse-cdn.com/v4/letter/e/b38774/32.png) [@EdvonSchleck](https://vaultwarden.discourse.group/u/EdvonSchleck)\
**Post date:** [January 21, 2022, 6:29pm UTC](https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409/1 "2022-01-21T18:29:09Z")

</div>

I would like to use valtwarden on my diskstation via docker. it also works so far, only I would like to use Bitwarden only offline on LAN. So no dyndns, port sharing or reverse proxy. I have a lot of instructions, unfortunately bitwarden/vaultwarden only responds to https.

is there a way to make bitwarden offline accessible for the LAN/intranet? Is it possible to disable SSL or another bypass?

i connect trom mobile devices via VPN.to LAN

---

<div class="post-metadata">

**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\
**Post date:** [January 21, 2022, 7:13pm UTC](https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409/2 "2022-01-21T19:13:29Z")

</div>

The web-vault is only accessable via https because the browsers only support the encryption api’s when using a secure connection or when you access it via localhost/127.0.0.1 in the last case it doesn’t need a secure connection.

---

<div class="post-metadata">

**Author:** ![EdvonSchleck](https://avatars.discourse-cdn.com/v4/letter/e/b38774/32.png) [@EdvonSchleck](https://vaultwarden.discourse.group/u/EdvonSchleck)\
**Post date:** [January 21, 2022, 7:51pm UTC](https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409/3 "2022-01-21T19:51:48Z")

</div>

thank for your answer  
any idea how could I use this somehow?

---

<div class="post-metadata">

**Author:** ![cksapp](https://avatars.discourse-cdn.com/v4/letter/c/b9e5f3/32.png) [@cksapp](https://vaultwarden.discourse.group/u/cksapp)\
**Post date:** [January 21, 2022, 8:04pm UTC](https://vaultwarden.discourse.group/t/option-vaultwarden-offline-for-vpn-lan-intranet/1409/4 "2022-01-21T20:04:27Z")

</div>

Try to check out the wiki article here

> **[Running a private vaultwarden instance with Let's Encrypt certs ·...](https://github.com/dani-garcia/vaultwarden/wiki/Running-a-private-vaultwarden-instance-with-Let's-Encrypt-certs)**
>
> Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden\_rs - Running a private vaultwarden instance with Let's Encrypt certs · dani-garcia/vaultwarden Wiki

Basically Vaultwarden can be spun up on a server of your choice (Disk station) and configured with a reverse proxy for SSL termination. SSL can either be a self-signed certificate (but would require you to add these to your trusted certificate store) or can also be used with valid cert using DNS only ACME.

All you would need to do is not forward any ports on your router/firewall to keep it private to LAN only access, and can also be used and accessed over VPN as long as your VPN has firewall rules to pass traffic from the VPN network to your main LAN.