I also agreed with everyone else regarding Vaultwarden. On top of that you can setup nginx proxy manager for SSL certificate and local access only (you don't even need to expose your npm externally). DNS resolution can be done either by pi-hole or adguard