『随笔』在NAS上部署VaultWarden

部署方式

果然啊，有 NAS 后是闲不下来的，看完 liushen 大佬的文章后，我也准备部署一个 vaultwarden 玩玩，这样密码也能多端同步了（毕竟收集上要访问 google 的服务器还是要点 magic 的）

直接上 Docker Compose

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      DOMAIN: "https://vault.example.top:6443"
      SIGNUPS_ALLOWED: "false"   # 是否允许注册
      WEBSOCKET_ENABLED: "true"
      ADMIN_TOKEN: 'ChangeMe'  # 明文密码，后面可以在 https://你的域名:端口/admin 内修改
      TZ: "Asia/Shanghai"
    volumes:
      - ./vw-data:/data
    networks:
      - vault-network

  caddy:
    image: caddy:latest
    container_name: caddy
    restart: unless-stopped
    ports:
      - "6443:6443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - ./certs:/certs:ro     # 证书挂载，可以用1Panel等ssl申请工具
      - ./caddy-data:/data
      - ./caddy-config:/config
    networks:
      - vault-network

networks:
  vault-network:
    driver: bridge

若容器无法启动，则需要将下面的文件复制到部署到 vaultwarden 根目录，重命名为 Caddylife （⚠️没有后缀）

https://vault.example.top:6443 {     # 替换成Docker Compose内配置的域名:端口
    tls /certs/fullchain.pem /certs/privkey.pem

    encode gzip

    header {
        Strict-Transport-Security "max-age=31536000;"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "DENY"
        X-Robots-Tag "none"
        -Server
    }

    reverse_proxy /notifications/hub vaultwarden:3012
    reverse_proxy vaultwarden:80
}

部署完成的效果应该是这样子的：