# Vaultwarden on Apache2
**URL:** https://dietpi.com/forum/t/vaultwarden-on-apache2/6200
**Category:** Troubleshooting
**Created:** [18 January 2022 18:01 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200 "2022-01-18T18:01:42Z")
**Posts on this page:** 17
**Page:** 1
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [18 January 2022 18:01 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/1 "2022-01-18T18:01:42Z")
Hi,
I searched the internet and this forum and I’m no wiser. So, once again, I’ve come to ask for help.
I have newest DietPi v8.0.2, running Nextcloud, Pi-Hole, Apache2 and some other unrelated software.
I wanted to give Vaultwarden a try, but am not able to make it work with my LetsEncrypt certificate.
My goal is have it available on [https://niaz.site:8001](https://niaz.site:8001), for external use with apps. I don’t need or want any redirects, just working it on exactly that address.
After installation of VW I tried it’s functionality with selfsigned certificate, everything was fine.
So I commented Rocket stuff in /mnt/dietpi\_userdata/vaultwarden/vaultwarden.env and added to /etc/apache2/sites-available/000-default-le-ssl.conf this:
```nohighlight
ServerName niaz.site
DocumentRoot /mnt/dietpi_userdata/vaultwarden/web-vault
ErrorLog ${APACHE_LOG_DIR}/bitwarden-error.log
#CustomLog ${APACHE_LOG_DIR}/bitwarden-access.log combined
SSLCertificateFile /etc/letsencrypt/live/niaz.site/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/niaz.site/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
```
This gave me Forbidden You don’t have permission to access this resource. page. So I added to /etc/apache2/apache2.conf this:
```nohighlight
DirectoryIndex index.php index.html
Options Indexes FollowSymLinks
AllowOverride None
Require all granted
```
Now the VW page is nicely available, but can’t connect to the account I made before. When I try to log in I get red notification:
An error has occurred. An unexpected error has occurred.
When I try to make a new account on this config, I get red notification stating:
```nohighlight
An error has occurred.
404 Not Found Not Found
The requested URL was not found on this server.
Apache/2.4.52 (Debian) Server at 10.11.0.100 Port 8001
```
Can you please help me figure out, where I screwed up? 🙂
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [18 January 2022 18:16 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/2 "2022-01-18T18:16:21Z")
Pls revert all changes you have done. Basically you have 2 options.
First one would be to configure VW to use the letsencrypt certificate directly. This would need to be done one VW configuration file. Still VW would be reachable on the original port 8001.
Second opinion would be to configure Apache to work as revers proxy. This would reduce the number of ports to be open if you like VW to be reachable from internet. VW would be reachable on normal web server ports 80/443.
You would need to decide first, which option you like to use.
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [18 January 2022 20:17 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/3 "2022-01-18T20:17:55Z")
Okay, reverted.
In second choice, how would it work with my Nextcloud, which I currently run on completely random port?
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [18 January 2022 20:58 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/4 "2022-01-18T20:58:23Z")
Means Apache is not running on port 80/443. Or did you create a vhost for Nextloud only? Usually it should be possible to reuse it or to create an own vhost configuration.
There are 2 example for Apache revers proxy configuration [https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples](https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples)
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [18 January 2022 21:41 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/5 "2022-01-18T21:41:24Z")
My /etc/apache2/sites-available/000-default-le-ssl.conf looks like this
```nohighlight
ServerName niaz.site
DocumentRoot /var/www
ErrorLog ${APACHE_LOG_DIR}/error.log
#CustomLog ${APACHE_LOG_DIR}/access.log combined
SSLCertificateFile /etc/letsencrypt/live/niaz.site/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/niaz.site/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
```
Then I access Nextcloud on [https://niaz.site:10443/nextcloud](https://niaz.site:10443/nextcloud)
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [18 January 2022 21:55 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/6 "2022-01-18T21:55:37Z")
again 2 options
create an own vhost configuration with another own random port
or
reuse the existing vhost for nextcloud and add a location config for VW. This would require to enable sub path on VW config.
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [18 January 2022 22:23 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/7 "2022-01-18T22:23:41Z")
> create an own vhost configuration with another own random port
That’s what I was aiming for originally but failed. 🙂
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [18 January 2022 22:53 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/8 "2022-01-18T22:53:22Z")
did you checked the configuration example on the VW Github I posted above? I guess the example Apache (by fbartels) might gonna fit. (server name and port to be adjusted). But this might require a 2nd certificate if you are going for sub domain.
Have a look into the 2nd example Apache in a sub-location (by ss89) if you prefer using a sub path.
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [19 January 2022 09:30 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/9 "2022-01-19T09:30:54Z")
That’s the configuration I was coming from. I thought I have the knowledge to make it work, but I was wrong.
My goal was to not have it as subdomain, just accessible on different port. I’ll try to read more on how it works.
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [19 January 2022 11:46 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/10 "2022-01-19T11:46:26Z")
on the configuration your shared, you tried to change DocumentRoot to the VW directory. This of course is not working because VW is not a web server application like NextCloud. It’s an own app providing an own http server. Means, you need to proxy request to VW via a revers proxy functionality.
Like this
```nohighlight
RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /notifications/hub(.*) ws://:3012/$1 [P,L]
ProxyPass / http://:80/
ProxyPreserveHost On
ProxyRequests Off
RequestHeader set X-Real-IP %{REMOTE_ADDR}s
```
or with sub path
```nohighlight
#adjust here if necessary
RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /notifications/hub(.*) ws://:3012/$1 [P,L]
ProxyPass http://:80/$sublocation/
ProxyPreserveHost On
RequestHeader set X-Real-IP %{REMOTE_ADDR}s
```
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [19 January 2022 20:15 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/11 "2022-01-19T20:15:06Z")
I think I’m not smart enough for this.
Where do I define the port for VW? Because my understanding is, that for reverse proxy solution rocket should be commented, right?
Or should ROCKET\_PORT=8001 still be set?
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [19 January 2022 21:36 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/12 "2022-01-19T21:36:25Z")
basically it is similar to this small how to [https://dietpi.com/forum/t/confused-reverse-proxy-and-vaultwarden/5762/21](https://dietpi.com/forum/t/confused-reverse-proxy-and-vaultwarden/5762/21)
On the point where it comes to web server config, you need to add Apache revers proxy config like the examples on VW Wiki
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [20 January 2022 09:56 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/13 "2022-01-20T09:56:43Z")
Ok, uncommented and set the websockets rules, also rocket port.
Now, should I add the Apache revers proxy config to existing config or create new? If new one, should I define it somewhere or will apache udnerstand it?
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [21 January 2022 13:17 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/14 "2022-01-21T13:17:57Z")
I would need to do some testing how the config needs to looks like. Personally I don’t have Apache + VW running at the moment, give me some time.
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [21 January 2022 22:10 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/15 "2022-01-21T22:10:14Z")
Of course, it’s not pressing issue.
I’m gonna be (and am) trying myself. Maybe I’m gonna have an heureka moment, but doubt it. 😃
---
### Author:  [@Niaz](https://dietpi.com/forum/u/Niaz)
#### Post date: [10 April 2024 10:29 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/16 "2024-04-10T10:29:39Z")
Any success? 😁
I’ve re-did my installation and now Nextcloud is left on default 443 - [https://niaz.site/nextcloud](https://niaz.site/nextcloud)
Still can’t figure out how to make Vaulwarden accessible for example on [https://niaz.site/vaultwarden](https://niaz.site/vaultwarden)
---
### Author:  [@Jappe](https://dietpi.com/forum/u/Jappe)
#### Post date: [10 April 2024 11:08 UTC](https://dietpi.com/forum/t/vaultwarden-on-apache2/6200/17 "2024-04-10T11:08:05Z")
I have it running, but with `lighttpd`, but I also just followed the examples from github. Disable rocket and use the example for apache:
[https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples](https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples)