# Vaultwarden and Nginx Proxy Manager

**URL:** <https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307>\
**Category:** Help\
**Created:** [December 6, 2021, 1:41pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307 "2021-12-06T13:41:49Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:41pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/1 "2021-12-06T13:41:50Z")

</div>

Hi!  
I set up the Nginx Proxy Manager with Docker and use it as reverse proxy. It already works with other docker images (i.e. Firefly III docker image).

Now I try to get Vaultwarden to work with the Nginx Proxy Manager.

The non-SSL connection already works and I can access Vaultwarden with [http://vaultwarden.mywebsite.com](http://vaultwarden.mywebsite.com)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:42pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/2 "2021-12-06T13:42:23Z")

</div>

I also set up a Letsencrypt certificate for [vaultwarden.mywebsite.com](http://vaultwarden.mywebsite.com). However as soon as I try to access Vaultwarden with [https://vaultwarden.mywebsite.com](https://vaultwarden.mywebsite.com) I get a 504 error (504 Gateway Timeout: remote server did not respond to the proxy).

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:43pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/3 "2021-12-06T13:43:08Z")

</div>

I have following docker setup:

 ![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/ee9bac0c21104f5dc88a82a5ede5ba6a75c528bd.png)  
The port 8060 is mapped to 80 and the port 3012 to 3012. I can access both ports with SERVER\_IP:8060 or SERVER\_IP:3012. The server ip is 192.168.178.75 (thus [http://192.168.178.75:8060](http://192.168.178.75:8060) and [http://192.168.178.75:3012](http://192.168.178.75:3012)).

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:44pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/4 "2021-12-06T13:44:05Z")

</div>

Now I’ve read multiple tutorials how to set up the Nginx Proxy Manager but all tutorials do not work for me (i.e. [Bitwarden (Vaultwarden) Passwort Manager installieren - ubiquiti - Deutsches Fan Forum](https://ubiquiti-networks-forum.de/wiki/entry/65-bitwarden-vaultwarden-passwort-manager-installieren) or NGINX: [Proxy examples · dani-garcia/vaultwarden Wiki · GitHub](https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples) ).

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:44pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/5 "2021-12-06T13:44:36Z")

</div>

My current Nginx Proxy Manager configuration is:

 ![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/362359a063b10373123b3ddea89869e183549f20.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:45pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/6 "2021-12-06T13:45:09Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/f2811f065b396aa8877319f3f66919a44854c40c.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:45pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/7 "2021-12-06T13:45:42Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/9ae4ffed75168c8c14b5a21fd34fd107591c7bae.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:46pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/8 "2021-12-06T13:46:16Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/7e0c7722807180d400f8fe3a5393d7d25d8767bb.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:46pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/9 "2021-12-06T13:46:47Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/d861cf234a1087128e9989da2b0a0c81b1544956.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:47pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/10 "2021-12-06T13:47:18Z")

</div>

![image](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/d8074ab561ea31aa854c4c23b43db3c87ecc41c2.png)

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 6, 2021, 1:48pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/11 "2021-12-06T13:48:07Z")

</div>

The tutorial [Bitwarden (Vaultwarden) Passwort Manager installieren - ubiquiti - Deutsches Fan Forum](https://ubiquiti-networks-forum.de/wiki/entry/65-bitwarden-vaultwarden-passwort-manager-installieren) and [https://www.reddit.com/r/Bitwarden/comments/k4wn1y/502\_bad\_gateway\_nginx\_proxy\_manager/gnseu4g/?utm\_source=reddit&utm\_medium=web2x&context=3](https://www.reddit.com/r/Bitwarden/comments/k4wn1y/502_bad_gateway_nginx_proxy_manager/gnseu4g/?utm_source=reddit&utm_medium=web2x&context=3) suggest, that I need to add the configuration to the “Custom Nginx Configuration” settings field (see last screenshot), however because of the hint below the field I think the configuration is wrong. I’ve already tried to follow the instructions and it didn’t work.

Can someone provide useful hints? Thank you!

---

<div class="post-metadata">

**Author:** ![jkasten](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/jkasten/32/560_2.png) [@jkasten](https://vaultwarden.discourse.group/u/jkasten)\
**Post date:** [December 7, 2021, 8:34pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/12 "2021-12-07T20:34:28Z")

</div>

This my config:

```auto
location /admin {
  return 404;
  }

  location / {
    proxy_pass http://192.168.3.35:8060;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
  }
  
  location /notifications/hub {
    proxy_pass http://192.168.3.35:3012;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
  }
  
  location /notifications/hub/negotiate {
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_pass http://192.168.3.35:8060;
  }

```

---

<div class="post-metadata">

**Author:** ![hannesfrater](https://avatars.discourse-cdn.com/v4/letter/h/ee7513/32.png) [@hannesfrater](https://vaultwarden.discourse.group/u/hannesfrater)\
**Post date:** [December 8, 2021, 10:10am UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/13 "2021-12-08T10:10:00Z")

</div>

Thank you! Where did you add these rules? To the custom NGINX config field (screenshot: [Vaultwarden and Nginx Proxy Manager - #10 by hannesfrater](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/10) )?

---

<div class="post-metadata">

**Author:** ![jkasten](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/jkasten/32/560_2.png) [@jkasten](https://vaultwarden.discourse.group/u/jkasten)\
**Post date:** [December 8, 2021, 10:22am UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/14 "2021-12-08T10:22:55Z")

</div>

Yes, correct. I add this stuff in the custim NGINX config field. Just add you ip and ports and it should work.

---

<div class="post-metadata">

**Author:** ![jkasten](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/jkasten/32/560_2.png) [@jkasten](https://vaultwarden.discourse.group/u/jkasten)\
**Post date:** [December 8, 2021, 10:27am UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/15 "2021-12-08T10:27:04Z")

</div>

![vaultwarden1](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/3fa2794600b79108181cbd76102c039f680ff038.png)  
 ![vaultwarden2](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/d817645c8b9915e5b8a278ca204499fccb36a3ef.png)  
 ![vaultwarden3](https://global.discourse-cdn.com/free1/uploads/vaultwarden/original/1X/39d7c63d104dcdbe08f2ef46df10c3a8f90751b0.png)

---

<div class="post-metadata">

**Author:** ![samsepi0l](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@samsepi0l](https://vaultwarden.discourse.group/u/samsepi0l)\
**Post date:** [January 17, 2022, 1:16pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/16 "2022-01-17T13:16:56Z")

</div>

I have the same configuration, I just start the vaultwarden docker, my ports are 8888:80 and 3012:3012.  
No I am trying to do the configuration that you just posted but it didn’t work for me. (I’m kinda of sure I just did it wrong but still)

---

<div class="post-metadata">

**Author:** ![jkasten](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/jkasten/32/560_2.png) [@jkasten](https://vaultwarden.discourse.group/u/jkasten)\
**Post date:** [January 17, 2022, 1:36pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/17 "2022-01-17T13:36:07Z")

</div>

You just need to put your ports and ip in and it should work. post your code and we can check if anything is wrong.

---

<div class="post-metadata">

**Author:** ![samsepi0l](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@samsepi0l](https://vaultwarden.discourse.group/u/samsepi0l)\
**Post date:** [January 17, 2022, 1:44pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/18 "2022-01-17T13:44:22Z")

</div>

Ok, lol I have it, I was following the tutorial on [pimylifeup.com](http://pimylifeup.com) and when they publish port, they put 127.0.0.1:8888:80 and 127.0.0.1:3012 so I just had to remove the IP address and now it is working.  
Just a question now, I can access my bitwarden anywhere, I have my own domain name that is proxied by cloudflare, do I have any extra steps that I need to do to improve security ?

---

<div class="post-metadata">

**Author:** ![jkasten](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/jkasten/32/560_2.png) [@jkasten](https://vaultwarden.discourse.group/u/jkasten)\
**Post date:** [January 17, 2022, 2:44pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/19 "2022-01-17T14:44:48Z")

</div>

You could deny new Users and use 2FA.

---

<div class="post-metadata">

**Author:** ![samsepi0l](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@samsepi0l](https://vaultwarden.discourse.group/u/samsepi0l)\
**Post date:** [January 17, 2022, 3:03pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307/20 "2022-01-17T15:03:12Z")

</div>

I did it, I’m glad there’s not extra steps to do

[Next page](https://vaultwarden.discourse.group/t/vaultwarden-and-nginx-proxy-manager/1307.md?page=2)
