vault.<domain> when enabled.
Prerequisites
Vaultwarden has its own app login. Protect the route and configure app-level admin settings before adding real secrets.
Steps
Verify
- The owner account can sign in.
- New account creation follows your intended policy.
- Backups cover the Vaultwarden data volume.
Next steps
TinyAuth
Confirm route protection before storing real secrets.
Uptime Kuma
Monitor the vault route and alert path.
Troubleshooting
The vault opens but sync fails
The vault opens but sync fails
Check that the public URL, TLS mode, and browser extension URL all match the same
vault.<domain> route.