Exposing only the Vaultwarden "Send"-Feature via Cloudflare Tunnel (alien.top)

submitted 11 months ago by redditor111222333@alien.top to c/main@selfhosted.forum

1 comments fedilink hide all child comments

Hey,

I am hosting vaultwarden with traefik in my homelab. I can connect via tailscale from everywhere. Working fine.

The Send Feature sounds really cool to me, but it doesnt make sense to have this behind tailscale (for sharing with others).

I am wondering if its secure to only publish the /send URL via Cloudflare or if there is a way to get to my vault then. I think Cloudflare Page Rules would be the feature to use here.

you are viewing a single comment's thread
view the rest of the comments

[-] Darkassassin07@lemmy.ca 1 points 11 months ago

I also recently setup vaultwarden and was wondering this.

Unfortunately I was unable to find a way to only expose the send function. The '/send/ path is preceded by a # making it part of the parameters instead of the uri path. Nginx in my case, sees all the requests for both the vault and the send feature coming from '/' '/app/' '/images/' and '/fonts/'.

this post was submitted on 01 Dec 2023

2 points (100.0% liked)

Self-Hosted Main

504 readers

1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

Service: Dropbox - Alternative: Nextcloud
Service: Google Reader - Alternative: Tiny Tiny RSS
Service: Blogger - Alternative: WordPress

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

Awesome-Selfhosted List of Software
Awesome-Sysadmin List of Software

founded 1 year ago

MODERATORS

communick@selfhosted.forum