# Vaultwarden local on HassOs

**URL:** <https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230>\
**Category:** Help\
**Created:** [January 3, 2024, 11:13pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230 "2024-01-03T23:13:59Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![scrazy10](https://avatars.discourse-cdn.com/v4/letter/s/35a633/32.png) [@scrazy10](https://vaultwarden.discourse.group/u/scrazy10)\
**Post date:** [January 3, 2024, 11:13pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230/1 "2024-01-03T23:13:59Z")

</div>

Hello everyone,  
i m litterally stuck and hopeless, because i m failing to properly configure vaultw. environment to reach my objective.

GOAL: Run a VW local instance (not reachable from Internet) on HomeAssistant (Rasp. Pi4) and connect to the istance through PC app and Android app in order to Sync the clients’database to the central Vaultwarden Server.

Problem: After about 40hourse of troubleshooting i m still having problems managing the HTTPS Certificates: On windows pc’app the error is “Unable to Fetch”, or it goes on timeout. On Android i receive error about the ceriticate  
I read and tried the Nginx Proxy, also Nginx Proxy manager and last but not least about Caddy2 to obtain the DNS Challenge configuration.

My environment (coming from the lateste attempt to make all this work):  
HassOs:

- Core 2024.1.0
- Supervisor 2023.12.0
- Operating System 11.2
- Frontend 20240103.3  
Vaultwarden Add-on:  
“Vaultwarden (Bitwarden) Current version: 0.20.1”  
DuckDNS:1.15.0  
Integration with domain linked to my Public IP: $[mydomain$.duckdns.org](http://mydomain$.duckdns.org)

All components are on the same machine (192.168.0.2)

VW Config:

```auto
ssl: true
certfile: fullchain.pem
keyfile: privkey.pem
log_level: debug

```

Caddy2 config file:

```auto

 {
  email $myemail$@gmail.com
 }

$mydomain$.duckdns.org {
    tls {
        dns duckdns env.$mytoken$
    }
    reverse_proxy https://localhost:7277
 }
env_vars: {
DOMAIN=$mydomain$.duckdns.org
DUCKDNS_TOKEN=$mytoken$
}
 log_level: debug

```

Following this guide ([How to use DNS provider modules in Caddy 2 - Wiki - Caddy Community](https://caddy.community/t/how-to-use-dns-provider-modules-in-caddy-2/8148)) I also downloaded the caddy custom binary (platform:linux arm64) thanks to git clone in the folder  
/share/caddy and i found a duckdns folder (/share/caddy/duckdns). I didnt understand if should i do something with these files.

Please i hope in the community and all the good people here to help me, is really really annoying.  
I am avaiable to change configurations and use NGINX Proxy or NGINX Proxy Manager or ADGuardHome (if should have sense) in order to fix this behaviour.

---

<div class="post-metadata">

**Author:** ![koying](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/koying/32/1284_2.png) [@koying](https://vaultwarden.discourse.group/u/koying)\
**Post date:** [January 8, 2024, 10:40am UTC](https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230/2 "2024-01-08T10:40:39Z")

</div>

> [@scrazy10](#):
>
> DuckDNS:1.15.0

The duckdns addon is for reaching HA (port 8123). The VW addon specifically tells that ingress (going through HA) is not possible, so you have to create a reverse proxy configuration specifically for VW, forwarded to to [http://homeassistant.local:7277](http://homeassistant.local:7277).

Enabling ssl for the VW is not really necessary and adds complexity.

> [@scrazy10](#):
>
> (not reachable from Internet)

If so, you don’t need duckdns, and you can directly use [http://homeassistant.local:7277](http://homeassistant.local:7277) as the server url.

> [@scrazy10](#):
>
> Android app

But then, the android app will only work when at home (or using a VPN; I use tailscale myself)

---

<div class="post-metadata">

**Author:** ![scrazy10](https://avatars.discourse-cdn.com/v4/letter/s/35a633/32.png) [@scrazy10](https://vaultwarden.discourse.group/u/scrazy10)\
**Post date:** [January 8, 2024, 10:24pm UTC](https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230/3 "2024-01-08T22:24:34Z")

</div>

Hi Koying,  
i solved this issue configuring caddy2 as a reverse proxy and using the DNS Challenge to validate the certificate.

Thanks for the support btw 😃 !!

---

<div class="post-metadata">

**Author:** ![Alterego](https://avatars.discourse-cdn.com/v4/letter/a/6bbea6/32.png) [@Alterego](https://vaultwarden.discourse.group/u/Alterego)\
**Post date:** [July 31, 2025, 10:42am UTC](https://vaultwarden.discourse.group/t/vaultwarden-local-on-hassos/3230/4 "2025-07-31T10:42:43Z")

</div>

Hello, i am trying to do the same, can you please explain how you made it working?