# Running a private vaultwarden instance with Traefik

**URL:** <https://vaultwarden.discourse.group/t/running-a-private-vaultwarden-instance-with-traefik/3548>\
**Category:** Uncategorized\
**Created:** [April 16, 2024, 10:33pm UTC](https://vaultwarden.discourse.group/t/running-a-private-vaultwarden-instance-with-traefik/3548 "2024-04-16T22:33:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\
**Post date:** [April 16, 2024, 10:33pm UTC](https://vaultwarden.discourse.group/t/running-a-private-vaultwarden-instance-with-traefik/3548/1 "2024-04-16T22:33:47Z")

</div>

Hi  
I currently run the latest version of vaultwarden as a docker container on my unraid server and use traefik reverse proxy and cloudflare tunnel to expose it to the web so that my bitwarden clients can constantly sync. After doing a bit of reading about the security issues with this, I wish to make vaultwarden only accessible from my internal network or through tailscale but am having issues with vaultwarden requiring HTTPS. I found the following guide for setting up letsencrypt certs with Caddy:

> **[Running a private vaultwarden instance with Let's Encrypt certs](https://github.com/dani-garcia/vaultwarden/wiki/Running-a-private-vaultwarden-instance-with-Let's-Encrypt-certs)**
>
> Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden\_rs - dani-garcia/vaultwarden

However I use traefik, can I still do the same thing with traefik? If so, can someone point me in the right direction to get this set up? Thanks

---

<div class="post-metadata">

**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\
**Post date:** [April 17, 2024, 9:29pm UTC](https://vaultwarden.discourse.group/t/running-a-private-vaultwarden-instance-with-traefik/3548/2 "2024-04-17T21:29:35Z")

</div>

Actually, I’ve managed to set up SSL wildcard certs with DNS challenge in traefik now but I can’t work out how to point my vaultwarden subdomain to the traefik container since traefik sits on one of the ports of my unraid server. When i go to adguard home (my internal DNS server) to add a custom DNS record, I can only point the vaultwarden subdomain to the server IP, which leads to the unraid login page rather than traefik. How can i point the vaultwarden subdomain directly to traefik but only on my local network? For external access, I use a cloudflare tunnel that tunnels straight to my traefik container but I’m trying to avoid exposing vaultwarden to the web