# Vaultwarden, Tailscale, synology ?!

**URL:** <https://vaultwarden.discourse.group/t/vaultwarden-tailscale-synology/4585>\
**Category:** Help\
**Created:** [April 7, 2025, 6:00am UTC](https://vaultwarden.discourse.group/t/vaultwarden-tailscale-synology/4585 "2025-04-07T06:00:33Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Acidflash](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/acidflash/32/1672_2.png) [@Acidflash](https://vaultwarden.discourse.group/u/Acidflash)\
**Post date:** [April 7, 2025, 6:00am UTC](https://vaultwarden.discourse.group/t/vaultwarden-tailscale-synology/4585/1 "2025-04-07T06:00:33Z")

</div>

Hello everyone,

I’m having trouble with a configuration I’m going to explain to you.

My goal is to use Vaultwarden installed on an LXC container on my PROXMOX using the Synology reverse proxy.

I have a Proxmox server.

I have a VM with Synology (ARC loader).

I have an LXC container with Vaultwarden installed, and in this same container, I installed Tailscale.

Vaultwarden is correctly installed, and I can access the web interface at http: ip:port … The problem is that Vaultwarden needs to be accessible via https.

To do this, I used the following command from my container’s shell to generate a certificate from letsencrypt: tailscale cert [my-domain.tailscale.net](http://my-domain.tailscale.net)

I retrieved the .crt and .key certificates, which I imported into my NAS certificates. No problems so far.

Then I created a rule on my NAS reverse proxy:

SOURCE:

Name: vaultwarden

Protocol: https

Hostname: my-domain. tailscale. net

Port: 443

DESTINATION:

Protocol : http

Hostname: 192.168._._

Port: \*\*\* (the port used when installing vaultwarden)

I then linked my certificate to this rule.

When I connect to https : // my-domain. tailscale. net, I get:

\*\*\*\*\*\*\*\*“”“”"

This site is inaccessible

my-domain. tailscale. net does not allow the connection.

Here are some tips:

Check the connection

ERR\_CONNECTION\_REFUSED

\*\*\*\*\*\*\*“”“”“”

When I connect to http : my-domain. tailscale. net:PORT, I access the web interface but without a menu because it’s inaccessible without https.

Does anyone have any suggestions?