HN Explorer

4 comments

[ 0.17 ms ] story [ 20.7 ms ] thread
chriscjcj
I use Bitwarden with Vaultwarden running in a Docker container on my Synology NAS. I have about 8 of my family and friends using it via a Wireguard VPN. It works well, but being the admin of it is a real responsibility. I regularly back it up and transport backups offsite. And since my NAS isn't addressable via a public IP address, I can't use Let'sEncrypt. All of the admin duties as well as the maintenance of renewing the cert every year is something that would be a problem for my family members if something happened to me.

I'm having a little trouble finding details on Buttercup's self-hosting requirements. Can anyone comment on whether it's more straightforward for a less tech-inclined person to steward?

erellsworth
I think you can use DNS challenge to get a cert without exposed ports, if your DNS has an api that supports it.
macros
I use tailscale and dns authorized letsencrypt certs for "internal" services and it has worked pretty well.
ArtemZ
It looks cool, but I'm not sure I want nodejs anything on my desktop considering KeepassXC exists. I just use meganz client across all my computers and mobile phones to syncronize kdbx it is doing it for me.