Vaultwarden Docker pre-deployment checklist

Why Vaultwarden

Vaultwarden is a Rust implementation of a Bitwarden-compatible server. The project recommends container images and advises placing the service behind a reverse proxy. It is a practical option for individuals, families and small teams running an entry-level server.

Before launch

1. Use a dedicated HTTPS domain for the password service.
2. Persist /data on the host; never leave the database only in the container layer.
3. Configure a strong admin token and disable public registration when it is not needed.
4. Bind the application port to localhost behind a correctly configured reverse proxy.
5. Keep encrypted off-site backups and test that they can be restored.

Docker Compose baseline

services:
  vaultwarden:
    image: vaultwarden/server:1.37.2
    restart: unless-stopped
    environment:
      DOMAIN: https://vault.example.com
    volumes:
      - ./vw-data:/data
    ports:
      - 127.0.0.1:8000:80

Before production use, add the admin token, SMTP, registration policy and reverse proxy. Read the release notes and back up the complete data directory before upgrading.

Sources

• Official Vaultwarden repository
• Vaultwarden 1.37.2 release