Hi everybody,
can I only open one Port to sync Clients from Internet to LAN?
Some Users don’t use VPN.
Thank you!
Given that there is no extra port for synchronization you can just open the HTTPS port (by default 443) to make it publicly available, no? I mean this depends on what port Vaultwarden is listening on / if you have a reverse proxy configure or not / etc.
I only have port 443 opened or forwarded, so, yes, that works. I use Caddy as a reverse proxy which also manages the Let’s Encrypt certificates. And while it’s recommended to have port 80 open as well for the certificate renewal process, it’s not strictly necessary. You just need to disable the ACME HTTP challenge.
Thank you for your input.