Setup A Private Vaultwarden Instance Using Docker-Compose And Cloudflare DNS On Your Synology NAS

in this video I'll show you how to run Vault Warden privately on your local network on a Synology NASA using Docker compose the setup I'll be going over is similar to my previous video where I installed the caddy web server along with vaultboarding but instead of using a DNS domain name we'll be using a cloudflare domain name which allows us to make use of a let's encrypt certificate in our setup also like the previous video I created a GitHub repository to streamline the setup process the repository will need to be cloned to your Synology nasp using git then I'll go through the steps to set everything up through the remainder of the video following the written directions included in the readme of the Repository I'll leave a link to the GitHub repository for your reference in the description below to start off I'll install some prerequisite packages from the package Center so I'll bring it up and first install docker then when done I'll search for and install the git server package and click run after it has been installed in my case I get this pop-up window because I didn't enable the SSH service which is a requirement for the git server to run so I'll click OK which then takes me directly to the terminal and SNMP control panel where I'll enable the SSH service then click apply and OK on this pop-up warning window now I'm able to run the git server successfully next I'll SSH into my Synology Nas CT into the slash volume one slash Docker directory and issue this git clone command to clone the GitHub repo that was set up for this video I'll then CD into the directory that was just created and create additional subdirectories that are needed for this setup next I'll log into my cloudflare account and I'll want to create a subdomain that I'll use to access vaultboard in my case I already have a domain that I've set up with cloudflare that I'll select which I'm assuming you already have as well I'll then click on the DNS listing then the add record button to get started creating a new subdomain for the subdomain setup I'll leave the type as an e-record enter in the subdomain name I'd like to use under name enter in the private IP address of the Synology Nas under ipv4 address toggle the proxy status switch off and click save next we'll want to create an API token that will be needed to create and update the let's encrypt certificate that will be managed through cloudflare's DNS for this I'll click on my profile select the API tokens listing then click on the create token button here I'll click on use template for the edit Zone DNS API token template to bring up this create token page I'll then give the token a name under permissions I'll leave the first entry as is and click add more and create a new Zone entry that is set to read under Zone resources I'll point that include specific Zone entry to my cloudflare domain then or TTL I'll change the end date to a feature date to Define how long the token will remain active I chose the date two years into the future but you can go even further if you want that's all that's needed so I'll click continue to summary then click create token to finish up the setup now I'll copy the API token that was created and you should do the same we'll be using the API token a little later in the video note that in the previous video I had to download the caddy web server from the caddyserver.com download page but they've been having issues with downloads hanging or failing so to simplify the whole process I've included the caddy file needed in the GitHub repository that I've created for this video with everything now in place I'll switch back to my SSH connection and edit the dot EnV file with the variables that are appropriate for my setup and you should do the same in my case I'll use ports 8080 n8443 as the HTTP and https ports that my Synology Nas uses to connect to the caddy web server I'll then enter in the subdomain that I've set up with cloudflare enter in an email address I'd like to use for let's encrypt communication and enter in the cloud player API token that I made note of earlier then save the changes now I should be able to start up the docker containers using this Docker compose command and after the Vault Warden and caddy images are pulled and the containers are created alt Warden should be up and running now I'll bring up vault boarding in my browser using https and the custom port number that was set up earlier along with the cloudflare subdomain that I configured we can see that the Vault Warden instance loads up properly and now I'm able to create a new account and log in and start making use of my private instance of Bolt board to learn more about Paul Borden and for resources I use to create this video check out the links I've added in the description below also check out my previous videos on vault Warden as did here on screen lastly if you'd like to support my work check out the support this channel section in the description below thanks so much for watching

Channel: Digital Aloha

Views: 3,602

Keywords: cloudflare, synology vaultwarden, bitwarden, password manager, bitwarden self hosted, vaultwarden, bitwarden docker, self host bitwarden, bitwarden password manager, bitwarden tutorial, docker vaultwarden, synology bitwarden setup, synology bitwarden install, synology bitwarden docker, bitwarden synology installation, synology, vaultwarden install, vaultwarden server, synology bitwarden, how to setup bitwarden, vaultwarden synology docker, vaultwarden synology

Id: ZBJR0KwP7OQ

Length: 6min 9sec (369 seconds)

Published: Sun May 14 2023