I’m using Vaultwarden Docker version 1.30.1 with NPM (Nginx Proxy Manager) and the latest version of Chrome & Firefox Bitwarden addons.
The browser addons report ‘synchronisation failed’ while Vaultwarden reports ‘200 OK’;
[2023-12-18 13:40:27.425][start][INFO] Rocket has launched from http://0.0.0.0:80
[2023-12-18 13:40:43.550][request][INFO] POST /identity/connect/token
[2023-12-18 13:40:43.562][response][INFO] (login) POST /identity/connect/token => 200 OK
[2023-12-18 13:40:43.868][request][INFO] GET /api/sync
[2023-12-18 13:40:43.971][response][INFO] (sync) GET /api/sync?<data…> => 200 OK
[2023-12-18 13:41:11.228][request][INFO] POST /identity/connect/token
[2023-12-18 13:41:11.248][response][INFO] (login) POST /identity/connect/token => 200 OK
[2023-12-18 13:41:11.537][request][INFO] GET /api/sync
[2023-12-18 13:41:11.695][response][INFO] (sync) GET /api/sync?<data…> => 200 OK
[2023-12-18 13:42:40.628][request][INFO] GET /notifications/hub?access_token=xxxx
[2023-12-18 13:42:40.628][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 192.168.1.19
[2023-12-18 13:42:40.629][response][INFO] (websockets_hub) GET /notifications/hub?<data…> => 200 OK
[2023-12-18 13:42:40.645][request][INFO] GET /api/accounts/revision-date
[2023-12-18 13:42:40.647][response][INFO] (revision_date) GET /api/accounts/revision-date => 200 OK
[2023-12-18 13:44:31.897][request][INFO] GET /notifications/hub?access_token=xxx
[2023-12-18 13:44:31.897][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 192.168.1.19
[2023-12-18 13:44:31.898][response][INFO] (websockets_hub) GET /notifications/hub?<data…> => 200 OK
[2023-12-18 13:44:31.932][request][INFO] GET /api/accounts/revision-date
[2023-12-18 13:44:31.934][response][INFO] (revision_date) GET /api/accounts/revision-date => 200 OK
the NPM config file looks like this;
#------------------------------------------------------------
# The `upstream` directives ensure that you have a xxxx/1.1 connection
# This enables the keepalive option and better performance
#
# Define the server IP and ports here.
upstream 192.168.1.17 {
zone 192.168.1.17 64k;
server 192.168.1.17;
keepalive 2;
}
map $http_upgrade $connection_upgrade {
default upgrade;
'' "";
}
server {
set $forward_scheme http;
set $server "192.168.1.17";
set $port 80;
listen 80;
listen [::]:80;
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name vault.xxx;
# Let's Encrypt SSL
include conf.d/include/letsencrypt-acme-challenge.conf;
include conf.d/include/ssl-ciphers.conf;
ssl_certificate /etc/letsencrypt/live/npm-2/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/npm-2/privkey.pem;
# Block Exploits
include conf.d/include/block-exploits.conf;
# Force SSL
include conf.d/include/force-ssl.conf;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_xxxx_version 1.1;
access_log /data/logs/proxy-host-2_access.log proxy;
error_log /data/logs/proxy-host-2_error.log warn;
location / {
proxy_pass http://192.168.1.17;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /notifications/hub {
proxy_pass http://192.168.1.17:3012;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location /notifications/hub/negotiate {
proxy_pass http://192.168.1.17:80;
}
# Custom
include /data/nginx/custom/server_proxy[.]conf;
}
Is something wrong in the NPM configuration?