generated from DAM/ts-TEMPLATE
Compare commits
1 Commits
main
...
michael.mc
| Author | SHA1 | Date | |
|---|---|---|---|
| 8055fecc40 |
6
.gitignore
vendored
6
.gitignore
vendored
@@ -1,6 +0,0 @@
|
||||
.env
|
||||
.env.*
|
||||
*.key
|
||||
tskey-*
|
||||
authkey*
|
||||
tailscale/tailscale-data/
|
||||
@@ -8,7 +8,6 @@ This project sets up a VaultWarden instance with Tailscale VPN integration using
|
||||
|
||||
- Docker and Docker Compose installed on your system
|
||||
- A Tailscale account and auth key (get one from https://login.tailscale.com/admin/authkeys)
|
||||
- HTTPS Certificates enabled in the DNS tab of Tailscale admin page
|
||||
- Basic understanding of Docker and networking concepts
|
||||
|
||||
## Project Structure
|
||||
@@ -34,14 +33,14 @@ ts-vaultwarden/
|
||||
mkdir -p tailscale/tailscale-data vaultwarden/data
|
||||
```
|
||||
3. Configure Tailscale
|
||||
- Make sure `TS_AUTHKEY` and `TS_LOGIN_SERVER` are set in your environment (or a local .env file) before running docker compose.
|
||||
- Replace `{{YOUR_TAILSCALE_AUTHKEY}}` in the docker-compose.yml with your actual Tailscale auth key
|
||||
- Optionally, update the file in `tailscale/config/serve.json` if you need specific Tailscale serve configurations
|
||||
- CAUTION: Changing `"${TS_CERT_DOMAIN}:443": false` to `true` will expose the service to the internet
|
||||
|
||||
4. Configure VaultWarden
|
||||
- Replace `{{YOUR_DOMAIN}}` in the `docker-compose.yml`
|
||||
- Configuring the Admin page (WebUI)
|
||||
- For a basic configuration update the following `ADMIN_TOKEN: "an-incredibly-complex-password-is-required"` in the `docker-compose.yml` and change the password. This password permits access to your admin page
|
||||
- For a basic configuration uncomment `ADMIN_TOKEN: "an-incredibly-complex-password-is-required"` in the `docker-compose.yml` and change the password. This password permits access to your admin page
|
||||
- For enterprise grade security follow these [directions](https://github.com/dani-garcia/vaultwarden/wiki/Enabling-admin-page#secure-the-admin_token).
|
||||
- **OPTIONAL** Vaultwarden's configuration is primarily managed through environment variables or a [.env file](https://github.com/dani-garcia/vaultwarden/blob/main/.env.template) for configuration options
|
||||
- [Helpful Tutorial](https://www.techaddressed.com/tutorials/vaultwarden-docker-compose/#cost-features)
|
||||
|
||||
@@ -21,8 +21,8 @@ services:
|
||||
restart: always
|
||||
environment:
|
||||
DOMAIN: "https://vaultwarden.{{YOUR_DOMAIN}}.ts.net" # <---- Your domain here! --- ie https://vaultwarden.tail123456.ts.net/
|
||||
ADMIN_TOKEN: "an-incredibly-complex-password-is-required" # <---- Insert complex password
|
||||
volumes:
|
||||
# ADMIN_TOKEN: "an-incredibly-complex-password-is-required" # <---- Insert complex password
|
||||
volume:
|
||||
- ./vaultwarden/data:/data
|
||||
network_mode: service:vaultwarden-ts
|
||||
depends_on:
|
||||
|
||||
Reference in New Issue
Block a user