3 ms·

I changed over months and months ago to v2. It was painful, but docs were being written at the time, and the community was able to help me with most of my probl

I changed over months and months ago to v2. It was painful, but docs were being written at the time, and the community was able to help me with most of my problems. The one last problem I've not solved yet is having caddy 2 work with bitwarden whereby bitwarden's ssl does not conflict with caddy 2. I was unable to figure out how to work with it, so my bitwarden ssl expires every month or two and I have to manually update the ssl by bringing down my personal site for a couple of minutes.

mholt 6y ago
Do you have a link? I'll take a look when I get a chance.
- sethammons 6y ago
  https://sethammons.com/posts/bitwarden_with_caddy/ https://sethammons.com/posts/bitwarden_with_caddy/ Documented there; would super appreciate any feedback on improvements for sure!
piaste 6y ago
Is there any reason you need to have bitwarden run its own TLS instead of letting Caddy terminate?
- sethammons 6y ago
  I could not find a setting to disable bitwarden running its own tls
m_sahaf 6y ago
Can you share what your setup is like? I have bitwarden_rs self-hosted with Caddy in the front doing TLS termination and proxying the request to Bitwarden_rs and haven't experienced any issues for more than a year and half now. There are many ways in how Caddy can be configured (e.g. maybe even just keeping the certs updated, but not serving any HTTP requests [0]). Feel free to drop a thread on the Caddy forum and we can help you out! [0] https://caddy.community/t/using-caddy-to-keep-certificates-renewed/7525 https://caddy.community/t/using-caddy-to-keep-certificates-r...
- sethammons 6y ago
  My setup if fully outlined here: https://sethammons.com/posts/bitwarden_with_caddy/ https://sethammons.com/posts/bitwarden_with_caddy/ If I don't get any traction on help here, I'll be sure to jump over to the community posts. Thanks!
  - m_sahaf 6y ago
    Bitwarden's docs say it's possible to bring your own certs[0]. The Bitwarden marketplace image on DigitalOcean asks whether you want it to manage its own certs or not. From minor googling, it seems you can change your mind later by modifying a yaml file[1]. HN threading isn't best format for support. If this still doesn't help, let's move the discussion elsewhere. [0] https://bitwarden.com/help/article/install-on-premise/ https://bitwarden.com/help/article/install-on-premise/ [1] https://gist.github.com/kylerchin/00e6990706183ddb0e0e792a1ce56822#file-config-yml-L33 https://gist.github.com/kylerchin/00e6990706183ddb0e0e792a1c...

mholt 6y ago

Do you have a link? I'll take a look when I get a chance.

sethammons 6y ago
https://sethammons.com/posts/bitwarden_with_caddy/ https://sethammons.com/posts/bitwarden_with_caddy/ Documented there; would super appreciate any feedback on improvements for sure!

piaste 6y ago

Is there any reason you need to have bitwarden run its own TLS instead of letting Caddy terminate?

sethammons 6y ago
I could not find a setting to disable bitwarden running its own tls

m_sahaf 6y ago

Can you share what your setup is like? I have bitwarden_rs self-hosted with Caddy in the front doing TLS termination and proxying the request to Bitwarden_rs and haven't experienced any issues for more than a year and half now. There are many ways in how Caddy can be configured (e.g. maybe even just keeping the certs updated, but not serving any HTTP requests [0]). Feel free to drop a thread on the Caddy forum and we can help you out! [0] https://caddy.community/t/using-caddy-to-keep-certificates-renewed/7525 https://caddy.community/t/using-caddy-to-keep-certificates-r...

sethammons 6y ago
My setup if fully outlined here: https://sethammons.com/posts/bitwarden_with_caddy/ https://sethammons.com/posts/bitwarden_with_caddy/ If I don't get any traction on help here, I'll be sure to jump over to the community posts. Thanks!
- m_sahaf 6y ago
  Bitwarden's docs say it's possible to bring your own certs[0]. The Bitwarden marketplace image on DigitalOcean asks whether you want it to manage its own certs or not. From minor googling, it seems you can change your mind later by modifying a yaml file[1]. HN threading isn't best format for support. If this still doesn't help, let's move the discussion elsewhere. [0] https://bitwarden.com/help/article/install-on-premise/ https://bitwarden.com/help/article/install-on-premise/ [1] https://gist.github.com/kylerchin/00e6990706183ddb0e0e792a1ce56822#file-config-yml-L33 https://gist.github.com/kylerchin/00e6990706183ddb0e0e792a1c...