Overview
Vaultwarden is useful for password manager hosting. Better-PaaS gives it a practical home on your own server with a one-click app workflow, domain routing, HTTPS, logs, and persistent storage habits.
Catalog image and ports
Better-PaaS deploys Vaultwarden from vaultwarden/server:1 on container port 80.
- Image: vaultwarden/server:1
- Port: 80
- Volumes: /data
- Key env vars: DOMAIN, ADMIN_TOKEN
Production notes for this catalog app
Because this stores password-manager data, require HTTPS, strong admin credentials, and verified backups before inviting users.
Why host Vaultwarden with Better-PaaS
Better-PaaS is designed for apps like Vaultwarden: small services that need reliable routing, a domain, persistent data, and quick redeploys without manually editing reverse proxy files.
Deployment checklist
Before going live, decide the domain, persistent volume, backup cadence, and any environment variables Vaultwarden needs. For Vaultwarden, pay special attention to Bitwarden-compatible storage with strict backup habits.
- Choose the app catalog template or Docker image
- Add required environment variables
- Attach a persistent volume if data must survive redeploys
- Deploy and inspect logs
- Add a custom domain after the app is healthy
Operations after launch
Watch logs during the first deploy, confirm storage survives a redeploy, and include the app data in server backups. If the service exposes an admin area, use a strong password and restrict access where appropriate.
FAQ
Can Vaultwarden run with automatic HTTPS?
Yes. Add a domain in Better-PaaS after DNS points to the server and Caddy can issue a certificate.
Does Vaultwarden need persistent storage?
Most security apps need some persistent storage or database plan. Treat app data and config as something to back up.