{"id":7227,"date":"2024-05-25T11:11:18","date_gmt":"2024-05-25T09:11:18","guid":{"rendered":"https:\/\/www.sigalou-domotique.fr\/?p=7227"},"modified":"2026-01-02T16:55:27","modified_gmt":"2026-01-02T14:55:27","slug":"jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology","status":"publish","type":"post","link":"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology","title":{"rendered":"I install Vaultwarden (Bitwarden) on my Synology NAS"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<label for=\"ez-toc-cssicon-toggle-item-6aec71746f758\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6aec71746f758\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Mon_objectif\" >My goal<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jinstalle_le_docker_Vaultwarden\" >I am installing the docker Vaultwarden<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_verifie_que_le_pare-feu_du_NAS_ne_bloque_pas_lacces\" >I check that the firewall of the NAS does not block access<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_vais_personnaliser_mon_nom_de_domaine\" >I will customize my domain name<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_verifie_les_routages_de_ports_de_mon_Routeur\" >I check the port routings of my Router<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_configure_un_Reverse_proxy_Synology\" >I configure a Reverse proxy Synology<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jactive_le_service_Yubikey\" >I activate the Yubikey service<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_vais_configurer_les_variables_denvironnement\" >I will configure the environment variables<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_cree_un_premier_compte_%C2%AB_famille_%C2%BB\" >I create a first \"family\" account<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jempeche_lajout_de_nouveaux_comptes\" >I prevent the addition of new accounts<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jinstalle_le_complement_navigateur_sur_Brave\" >I install the browser add-in on Brave<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_securise_le_compte_famille_proprietaire_avec_la_Yubikey\" >I secure the family account (owner) with the Yubikey<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_securise_le_compte_utilisateur_avec_la_Yubikey_et_Microsoft_Authentificator\" >I secure the user account with the Yubikey and Microsoft Authenticator<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_configure_un_acces_Administration_securise\" >I set up a secure administration access<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jaccede_a_la_page_de_configuration_de_Vaultwarden\" >I access the Vaultwarden configuration page<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jorganise_une_sauvegarde_des_donnees_de_Vaultwarden\" >I organise a backup of Vaultwarden\u2019s data<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jinstalle_Synology_Hyper_Backup\" >I install Synology Hyper Backup<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Jouvre_un_Dropbox_dedie_avec_une_adresse_dediee\" >I open a dedicated Dropbox with a dedicated address<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_lance_Hyper_Backup_et_programme_la_sauvegarde\" >I launch Hyper Backup and program the backup<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Je_teste_ma_sauvegarde\" >I test my backup<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/#Biblio\" >Biblio<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Mon_objectif\"><\/span>My goal<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I have been using KeepassXC for months, it works perfectly, I had done a Retex on it. <a href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/\" target=\"_blank\" rel=\"noopener\">I set up my password manager on all my computers and smartphone<\/a><\/p>\r\n<p>I have a problem with Keepass, which is sharing passwords. Some passwords are to be shared between me and my wife, this is not possible with Keepass. We use one database each because we have two authentication modes to open the database.<\/p>\r\n<p>So I'm looking for a solution and Bitwarden offers it, we can create an \"organization\" that corresponds to the family and we can have passwords specific to each or shared passwords. Perfect, that\u2019s what I\u2019m looking for.<\/p>\r\n<p>So I'm going to install Vaultwarden on my Synology NAS in a Container Manager docker. Configure a domain name for this, give it a certificate to exploit the https, choose a port other than 443 to secure a little more. Configure my router with port redirects and then configure Vaultwarden, allow it to send emails and secure use with Yubikey and Microsoft Athentificator (TOTP) \u2026 authentication.<!--more--><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_le_docker_Vaultwarden\"><\/span>I am installing the docker Vaultwarden<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>In Synology Container Manager on my Synology NAS, I go to Registry download vaultwarden\/server<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7232\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1.png\" alt=\"\" width=\"1029\" height=\"240\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1.png 1029w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1-600x140.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1-300x70.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1-1024x239.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw1-1-768x179.png 768w\" sizes=\"auto, (max-width: 1029px) 100vw, 1029px\" \/><\/a><\/p>\r\n<p><span style=\"font-size: revert; color: initial;\">I take the \"last\" version and download.<\/span><\/p>\r\n<p>Once loaded, I click Run<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7233\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw2.png\" alt=\"\" width=\"750\" height=\"591\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw2.png 750w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw2-600x473.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw2-300x236.png 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/a><\/p>\r\n<p>I change a few parameters as in the image above.<\/p>\r\n<p>I quickly switch to File Station to add a vaultwarden folder to the docker folder.<\/p>\r\n<p>If I understood correctly, using a folder created in File Station should not destroy the data if the docker is deleted, to check \u2026<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw3-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7235\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw3-1.png\" alt=\"\" width=\"468\" height=\"276\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw3-1.png 468w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw3-1-300x177.png 300w\" sizes=\"auto, (max-width: 468px) 100vw, 468px\" \/><\/a><\/p>\r\n<p>I configure the ports of vaultwarden 3012 and 3013 and its data file that I just created in File Station<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7236\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw4.png\" alt=\"\" width=\"747\" height=\"590\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw4.png 747w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw4-600x474.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw4-300x237.png 300w\" sizes=\"auto, (max-width: 747px) 100vw, 747px\" \/><\/a><\/p>\r\n<p>I finish the wizard and then press the blue button to start the creation of the docker.<\/p>\r\n<p>On the Container tab, perfect, a green dot indicates that it is launched.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7237\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw5.png\" alt=\"\" width=\"537\" height=\"168\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw5.png 537w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw5-300x94.png 300w\" sizes=\"auto, (max-width: 537px) 100vw, 537px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_verifie_que_le_pare-feu_du_NAS_ne_bloque_pas_lacces\"><\/span>I check that the firewall of the NAS does not block access<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>To ensure that the firewall on my NAS (which should be activated) does not block port 3013, I will allow it (Security \/ Firewall \/ Change rules)<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7238\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6.png\" alt=\"\" width=\"1027\" height=\"458\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6.png 1027w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6-600x268.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6-300x134.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6-1024x457.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw6-768x342.png 768w\" sizes=\"auto, (max-width: 1027px) 100vw, 1027px\" \/><\/a><\/p>\r\n<p>then<a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7239\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7.png\" alt=\"\" width=\"775\" height=\"158\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7.png 775w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7-600x122.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7-300x61.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw7-768x157.png 768w\" sizes=\"auto, (max-width: 775px) 100vw, 775px\" \/><\/a><\/p>\r\n<p>I can check that vaultwarden starts on the ip address of my syno and port 3013<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw8.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7240\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw8.png\" alt=\"\" width=\"328\" height=\"55\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw8.png 328w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw8-300x50.png 300w\" sizes=\"auto, (max-width: 328px) 100vw, 328px\" \/><\/a><\/p>\r\n<p>It does not suit me, I want to be able to access it from the outside, that the connection is in https and that a domain name is used instead of an IP.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_vais_personnaliser_mon_nom_de_domaine\"><\/span>I will customize my domain name<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I go to External Access \/ DDNS \/ Add DDNS<\/p>\r\n<p>I take the Synology service, everything else is simple to complete, I tick the box to get a certificate and I activate Heartbeat to be warned if there is any concern.<\/p>\r\n<p>Creating the set takes a few minutes and here is my DDNS access created:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7241\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9.png\" alt=\"\" width=\"941\" height=\"375\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9.png 941w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9-600x239.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9-300x120.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw9-768x306.png 768w\" sizes=\"auto, (max-width: 941px) 100vw, 941px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_verifie_les_routages_de_ports_de_mon_Routeur\"><\/span>I check the port routings of my Router<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I go to my Router, Network Center\/Port Transmission and redirect ports to my NAS<\/p>\r\n<p>The port 1999 will be the public https port that will go to the port 1999 of the NAS, I configure this manually.<\/p>\r\n<p>The 3012 and 3013 ports are configured automatically and then the Syno NAS and Syno Router talk to each other.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7243\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1.png\" alt=\"\" width=\"1172\" height=\"88\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1.png 1172w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1-600x45.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1-300x23.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1-1024x77.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw10-1-768x58.png 768w\" sizes=\"auto, (max-width: 1172px) 100vw, 1172px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_un_Reverse_proxy_Synology\"><\/span>I configure a Reverse proxy Synology<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>On the NAS, I'm going Control Panel \/ Login Portal \/ Advanced \/ Reverse Proxy<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7244\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw12.png\" alt=\"\" width=\"427\" height=\"560\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw12.png 427w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw12-229x300.png 229w\" sizes=\"auto, (max-width: 427px) 100vw, 427px\" \/><\/a><\/p>\r\n<p>I take over the port 1999 which is the https port (initially 443 therefore) and send it all to the port 3013 of localhost.<\/p>\r\n<p>My domain name is vaultwarden.xxxxxxx.familyds.com and therefore Vaultwarden joingnable on <a href=\"https:\/\/vaultwarden.xxxxxxx.familyds.com:1999\">https:\/\/vaultwarden.xxxxxxx.familyds.com:1999<\/a><\/p>\r\n<p>It is perfect, the connection works, in https with a domain name and with a valid certificate.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jactive_le_service_Yubikey\"><\/span>I activate the Yubikey service<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>To use my Yubikey with VaultWarden, you must activate the service and retrieve an ID and a key on the Yubico website<\/p>\r\n<p>I'm going on <a href=\"https:\/\/upgrade.yubico.com\/getapikey\/\" target=\"_blank\" rel=\"noopener\">https:\/\/upgrade.yubico.com\/getapikey\/<\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7250\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13.png\" alt=\"\" width=\"1172\" height=\"432\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13.png 1172w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13-600x221.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13-300x111.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13-1024x377.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw13-768x283.png 768w\" sizes=\"auto, (max-width: 1172px) 100vw, 1172px\" \/><\/a><\/p>\r\n<p>Just put your email, click on the Yubikey OTP box, press the Yubiket button and then validate.<\/p>\r\n<p>I get two pieces of information<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw14.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7252\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw14.png\" alt=\"\" width=\"144\" height=\"97\" \/><\/a><\/p>\r\n<p>I will place these two pieces of information in environment variables.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_vais_configurer_les_variables_denvironnement\"><\/span>I will configure the environment variables<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Environment variables are configured in Container Manager, Containers tab, stop the vaultwarden container and go to Settings.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw15.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7253\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw15.png\" alt=\"\" width=\"621\" height=\"791\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw15.png 621w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw15-600x764.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw15-236x300.png 236w\" sizes=\"auto, (max-width: 621px) 100vw, 621px\" \/><\/a><\/p>\r\n<p>To allow my Yubikey key, I add these two variables:<\/p>\r\n<ul>\r\n<li>YUBICO_CLIENT_ID: First field recover above<\/li>\r\n<li>YUBICO_SECRET_KEY: Second field recover above<\/li>\r\n<\/ul>\r\n<p>To secure my domain, I add this variable, which corresponds to:<\/p>\r\n<ul>\r\n<li>DOMAIN: <a href=\"https:\/\/vaultwarden.xxxxxxx.familyds.com\">https:\/\/vaultwarden.xxxxxxx.familyds.com<\/a><\/li>\r\n<\/ul>\r\n<p>To be able to send emails (more convenient to send guests and check emails)<\/p>\r\n<ul>\r\n<li>SMTP_HOST: smtp.free.fr<\/li>\r\n<li>SMTP_FROM: the e-mail address that will send the e-mails<\/li>\r\n<li>SMTP_PORT: 587<\/li>\r\n<li>SMTP_SECURITY: starttls<\/li>\r\n<li>SMTP_USERNAME: firstname@free.fr<\/li>\r\n<li>SMTP_PASSWORD: the account password<\/li>\r\n<\/ul>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_cree_un_premier_compte_%C2%AB_famille_%C2%BB\"><\/span>I create a first \"family\" account<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>In order not to give administrator access to users, I use a \u2018family\u2019 email to create a first account and organisation.<\/p>\r\n<p>This account will have an \"owner\" role.<\/p>\r\n<p>I add \u2018user\u2019 accounts with the emails of family members, everyone will then be able to validate their email and create their account. The owner profile must then accept them.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jempeche_lajout_de_nouveaux_comptes\"><\/span>I prevent the addition of new accounts<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>To make it even more secure, I will block the addition of new accounts.<\/p>\r\n<p>To this end, I am adding a new environment variable, as in the penultimate paragraph.<\/p>\r\n<p>The variable is<\/p>\r\n<ul>\r\n<li>SIGNUPS_ALLOWED: false<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw16.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7254\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw16.png\" alt=\"\" width=\"466\" height=\"75\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw16.png 466w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw16-300x48.png 300w\" sizes=\"auto, (max-width: 466px) 100vw, 466px\" \/><\/a><\/p>\r\n<p>If an account is added, it will be refused:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw17.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7255\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw17.png\" alt=\"\" width=\"279\" height=\"127\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jinstalle_le_complement_navigateur_sur_Brave\"><\/span>I install the browser add-in on Brave<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I will go and load the extension of my browser<\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/bitwarden.com\/download\/#downloads-web-browser\" target=\"_blank\" rel=\"noopener\">https:\/\/bitwarden.com\/download\/#downloads-web-browser<\/a><\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7258\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18.png\" alt=\"\" width=\"471\" height=\"266\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18.png 1003w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18-600x339.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18-300x169.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw18-768x433.png 768w\" sizes=\"auto, (max-width: 471px) 100vw, 471px\" \/><\/a><\/p>\r\n<p>Once installed, I have to configure the \"self-hosted\" server that is on my NAS.<\/p>\r\n<p>In front of<strong> connection on<\/strong> I have to specify <strong>self-hosted<\/strong>.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw19.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7259\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw19.png\" alt=\"\" width=\"426\" height=\"645\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw19.png 426w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw19-198x300.png 198w\" sizes=\"auto, (max-width: 426px) 100vw, 426px\" \/><\/a><\/p>\r\n<p>I specify the https address to my reverse DNS by specifying the port.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw20.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7260\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw20.png\" alt=\"\" width=\"381\" height=\"211\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw20.png 381w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw20-300x166.png 300w\" sizes=\"auto, (max-width: 381px) 100vw, 381px\" \/><\/a><\/p>\r\n<p>Then, I log it with mail\/password main of my user account and I find all my credentials.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw21.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7261\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw21.png\" alt=\"\" width=\"367\" height=\"318\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw21.png 367w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw21-300x260.png 300w\" sizes=\"auto, (max-width: 367px) 100vw, 367px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_securise_le_compte_famille_proprietaire_avec_la_Yubikey\"><\/span>I secure the family account (owner) with the Yubikey<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7262\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22.png\" alt=\"\" width=\"1023\" height=\"833\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22.png 1023w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22-600x489.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22-300x244.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw22-768x625.png 768w\" sizes=\"auto, (max-width: 1023px) 100vw, 1023px\" \/><\/a><\/p>\r\n<p>I click Manage in front of Yubico.<\/p>\r\n<p>I press the frame under Yubikey 1, I plug in my Yubikey, I press the button and I validate.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7263\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24.png\" alt=\"\" width=\"791\" height=\"372\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24.png 791w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24-600x282.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24-300x141.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw24-768x361.png 768w\" sizes=\"auto, (max-width: 791px) 100vw, 791px\" \/><\/a><\/p>\r\n<p>That\u2019s ok, Yubikey is my second authentication.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7264\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23.png\" alt=\"\" width=\"787\" height=\"80\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23.png 787w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23-600x61.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23-300x30.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw23-768x78.png 768w\" sizes=\"auto, (max-width: 787px) 100vw, 787px\" \/><\/a><\/p>\r\n<p>Before leaving this screen, I generate and print the recovery code.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw25.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7265\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw25.png\" alt=\"\" width=\"507\" height=\"262\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw25.png 507w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw25-300x155.png 300w\" sizes=\"auto, (max-width: 507px) 100vw, 507px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_securise_le_compte_utilisateur_avec_la_Yubikey_et_Microsoft_Authentificator\"><\/span>I secure the user account with the Yubikey and Microsoft Authenticator<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>The user account will be registered in the browser extension but also in the smartphone.<\/p>\r\n<p>For example:<\/p>\r\n<ul>\r\n<li>on the computer, opening the account with the password + the Yubikey will be the easiest.<\/li>\r\n<li>on the smartphone, the account can be opened either via the password + Yubikey (in NFC) or via the password + Microsoft Authenticator (TOTP)<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7269\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26.png\" alt=\"\" width=\"798\" height=\"192\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26.png 798w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26-600x144.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26-300x72.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw26-768x185.png 768w\" sizes=\"auto, (max-width: 798px) 100vw, 798px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_configure_un_acces_Administration_securise\"><\/span>I set up a secure administration access<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>Vaultwarden offers an administration page, you have to secure it to use it.<\/p>\r\n<p>A plain text environment variable may be used, but this is not recommended.<\/p>\r\n<p>It is better to use a Hash in Argon2, so I will use the website <a href=\"https:\/\/argon2.online\/\" target=\"_blank\" rel=\"noopener\">https:\/\/argon2.online\/<\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7272\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28.png\" alt=\"\" width=\"1120\" height=\"835\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28.png 1120w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28-600x447.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28-300x224.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28-1024x763.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw28-768x573.png 768w\" sizes=\"auto, (max-width: 1120px) 100vw, 1120px\" \/><\/a><\/p>\r\n<p>In this example, I use 3Mssk7Hi4cb\u201cwzUC7fgTR as input text, click on the notched wheel to add salt to the hash, tick Argon2id and get the result \u201c\u00a0$argon2id$v=19$m=16,t=2,p=1$c0JJWHVQamhGQzF6MXZudg$vlmd1dpgBVgwU4BM7RUUVw\u201d is what I will place in the container environment variable (see a few previous paragraphs for explanation)<\/p>\r\n<ul>\r\n<li>ADMIN_TOKEN: $argon2id$v=19$m=16,t=2,p=1$c0JJWHVQamhGQzF6MXZudg$vlmd1dpgBVgwU4BM7RUUVw<\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw29.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7273\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw29.png\" alt=\"\" width=\"465\" height=\"110\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw29.png 465w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw29-300x71.png 300w\" sizes=\"auto, (max-width: 465px) 100vw, 465px\" \/><\/a><\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jaccede_a_la_page_de_configuration_de_Vaultwarden\"><\/span>I access the Vaultwarden configuration page<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>I'm going on <a href=\"https:\/\/vaultwarden.xxxxx.familyds.com:1999\/admin\">https:\/\/vaultwarden.xxxxx.familyds.com:1999\/admin<\/a><\/p>\r\n<p>I put the password, which is the entry text of the hash, so 3Mssk7Hi4cb\u201cwzUC7fgTR in my example.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7276\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30.png\" alt=\"\" width=\"1325\" height=\"742\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30.png 1325w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30-600x336.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30-300x168.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30-1024x573.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw30-768x430.png 768w\" sizes=\"auto, (max-width: 1325px) 100vw, 1325px\" \/><\/a><\/p>\r\n<p>I walk a little in the config, it is a bit of a hidden side of vaultwarden, to discover.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Jorganise_une_sauvegarde_des_donnees_de_Vaultwarden\"><\/span>I organise a backup of Vaultwarden\u2019s data<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<h3><span class=\"ez-toc-section\" id=\"Jinstalle_Synology_Hyper_Backup\"><\/span>I install Synology Hyper Backup<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p>On my NAS, in Packet Centre, I install Hyper Backup.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw31.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7287\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw31.png\" alt=\"\" width=\"527\" height=\"411\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw31.png 527w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw31-300x234.png 300w\" sizes=\"auto, (max-width: 527px) 100vw, 527px\" \/><\/a><\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Jouvre_un_Dropbox_dedie_avec_une_adresse_dediee\"><\/span>I open a dedicated Dropbox with a dedicated address<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p>I am therefore isolating this data.<\/p>\r\n<p>I enable dual authentication for access to my new Dropbox.<\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Je_lance_Hyper_Backup_et_programme_la_sauvegarde\"><\/span>I launch Hyper Backup and program the backup<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw32.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7288\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw32.png\" alt=\"\" width=\"525\" height=\"291\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw32.png 714w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw32-600x333.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw32-300x166.png 300w\" sizes=\"auto, (max-width: 525px) 100vw, 525px\" \/><\/a><\/p>\r\n<p>I check <strong>Folders and packages<\/strong> then I choose the mode <strong>Dropbox<\/strong><\/p>\r\n<p>The link between Dropbox and Hyper Backup takes 2s and I'm going to choose where to backup, so I'm going to create a NAS Backup folder and a NAS directory (to stay vague about the content).<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw33.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7289\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw33.png\" alt=\"\" width=\"714\" height=\"263\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw33.png 714w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw33-600x221.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw33-300x111.png 300w\" sizes=\"auto, (max-width: 714px) 100vw, 714px\" \/><\/a><\/p>\r\n<p>I will then choose the folders to save<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw34.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7290\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw34.png\" alt=\"\" width=\"280\" height=\"117\" \/><\/a><\/p>\r\n<p>I am not interested in saving applications, I do not check anything.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw35.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter  wp-image-7291\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw35.png\" alt=\"\" width=\"358\" height=\"300\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw35.png 711w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw35-600x502.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw35-300x251.png 300w\" sizes=\"auto, (max-width: 358px) 100vw, 358px\" \/><\/a><\/p>\r\n<p>I finish the last screen by putting a client-side encryption password. I download and store carefully the password and PEM file provided.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw36.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7292\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw36.png\" alt=\"\" width=\"708\" height=\"590\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw36.png 708w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw36-600x500.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw36-300x250.png 300w\" sizes=\"auto, (max-width: 708px) 100vw, 708px\" \/><\/a><\/p>\r\n<p>At the end of the wizard, I validate the launch of the first backup<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw37.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7293\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw37.png\" alt=\"\" width=\"555\" height=\"174\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw37.png 555w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw37-300x94.png 300w\" sizes=\"auto, (max-width: 555px) 100vw, 555px\" \/><\/a><\/p>\r\n<p>I will take a look at Dropbox, everything went well.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw38.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7294\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw38.png\" alt=\"\" width=\"283\" height=\"307\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw38.png 283w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw38-277x300.png 277w\" sizes=\"auto, (max-width: 283px) 100vw, 283px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw39.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7295\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw39.png\" alt=\"\" width=\"700\" height=\"175\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw39.png 700w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw39-600x150.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw39-300x75.png 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/a><\/p>\r\n<p>I have some time before filling in the Dropbox.<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Je_teste_ma_sauvegarde\"><\/span>I test my backup<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<p>For the record, a backup that is not tested in restoration<strong> is useless<\/strong> !!!!!!!!!<\/p>\r\n<p>I stop the docker vaultwarden and then I go to File station.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw40.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7299\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw40.png\" alt=\"\" width=\"627\" height=\"297\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw40.png 627w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw40-600x284.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw40-300x142.png 300w\" sizes=\"auto, (max-width: 627px) 100vw, 627px\" \/><\/a><\/p>\r\n<p>I rename my docker\/vaultwarden file to vaultwarden 27-05-2024 and I recreate an empty vaultwarden file.<\/p>\r\n<p>I relaunch the docker vaultwarden then I go on <a href=\"https:\/\/vaultwarden.xxxxx.familyds.com:1999\/admin\">https:\/\/vaultwarden.xxxxx.familyds.com:1999\/admin<\/a><\/p>\r\n<p>in the Users tab:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7300\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41.png\" alt=\"\" width=\"1326\" height=\"490\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41.png 1326w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41-600x222.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41-300x111.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41-1024x378.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw41-768x284.png 768w\" sizes=\"auto, (max-width: 1326px) 100vw, 1326px\" \/><\/a><\/p>\r\n<p>It\u2019s perfect, everything is empty, so I lost all my data. vaultwarden reset and reinjected its data files by default:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7301\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42.png\" alt=\"\" width=\"892\" height=\"394\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42.png 892w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42-600x265.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42-300x133.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw42-768x339.png 768w\" sizes=\"auto, (max-width: 892px) 100vw, 892px\" \/><\/a><\/p>\r\n<p>Obviously, I purge everything for security and I will restore my last backup, I launch Hyper Backup.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw43.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7302\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw43.png\" alt=\"\" width=\"701\" height=\"194\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw43.png 701w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw43-600x166.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw43-300x83.png 300w\" sizes=\"auto, (max-width: 701px) 100vw, 701px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw44.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7303\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw44.png\" alt=\"\" width=\"705\" height=\"183\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw44.png 705w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw44-600x156.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw44-300x78.png 300w\" sizes=\"auto, (max-width: 705px) 100vw, 705px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw45.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7304\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw45.png\" alt=\"\" width=\"606\" height=\"237\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw45.png 606w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw45-600x235.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw45-300x117.png 300w\" sizes=\"auto, (max-width: 606px) 100vw, 606px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw47.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7305\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw47.png\" alt=\"\" width=\"706\" height=\"346\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw47.png 706w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw47-600x294.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw47-300x147.png 300w\" sizes=\"auto, (max-width: 706px) 100vw, 706px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw49.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7306\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw49.png\" alt=\"\" width=\"691\" height=\"166\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw49.png 691w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw49-600x144.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw49-300x72.png 300w\" sizes=\"auto, (max-width: 691px) 100vw, 691px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw50.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7307\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw50.png\" alt=\"\" width=\"700\" height=\"167\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw50.png 700w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw50-600x143.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2024\/05\/vw50-300x72.png 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/a><\/p>\r\n<p>It's over, I'm relaunching the docker and I'm going to test \u2026, my data is back, everything is working perfectly. Perfect, my backup is viable.<\/p>\r\n<p>\u00a0<\/p>\r\n<h2><span class=\"ez-toc-section\" id=\"Biblio\"><\/span>Biblio<span class=\"ez-toc-section-end\"><\/span><\/h2>\r\n<ul>\r\n<li><a href=\"https:\/\/www.maison-et-domotique.com\/140164-installer-vaultwarden-bitwarden-docker-synology\/\">https:\/\/www.maison-et-domotique.com\/140164-installer-vaultwarden-bitwarden-docker-synology\/<\/a><\/li>\r\n<li><a href=\"https:\/\/www.it-connect.fr\/auto-hebergement-installer-vaultwarden-bitwarden-sur-son-nas-synology\/\">https:\/\/www.it-connect.fr\/auto-hebergement-installer-vaultwarden-bitwarden-sur-son-nas-synology\/<\/a><\/li>\r\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>My lens I have been using KeepassXC for months, it works perfectly, I had done a Retex on it. I set up my password manager on all my computers and smartphones I have a problem with Keepass, which is sharing passwords. Some passwords to share between my wife [\u2026]<\/p>","protected":false},"author":1,"featured_media":7284,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[14,166],"tags":[],"class_list":["post-7227","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-domotique","category-retex"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/7227","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/comments?post=7227"}],"version-history":[{"count":0,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/7227\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media\/7284"}],"wp:attachment":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media?parent=7227"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/categories?post=7227"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/tags?post=7227"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}