# Docker 架設Vaultwarden密碼管理工具

<p class="callout info">**Vaultwarden是以Bitwarden為原型、用Rust語言重新改寫的版本，比原始的Bitwarden更加輕量化**</p>

#### **安裝Vaultwarden**  


```
docker pull vaultwarden/server
```

```
cd /var/lib/docker/volumes
```

```
mkdir vaultwarden
```

```
cd vaultwarden
```

**建立docker-compose.yml**

```
version: '3'
services:
  app:
    image: 'vaultwarden/server:latest'
    container_name: vaultwarden
    restart: always
    volumes:
      - ./vw-data/:/data/
    environment:
      - ADMIN_TOKEN=1qaxxwsx3xx
    ports:
      - 80:80
      - 443:443
```

```
docker compose up -d
```

#### **管理介面**

<p class="callout warning">**Vaultwarden強制使用SSL才能使用，Docker啟動後先進入admin頁面修改網域 http://ip/admin**</p>

**Admin Token為上方docker-compose.yml的token**

[![image.png](https://note.homesitetw.com/uploads/images/gallery/2025-07/scaled-1680-/eYNimage.png)](https://note.homesitetw.com/uploads/images/gallery/2025-07/eYNimage.png)

#### **修改網域**

[![image.png](https://note.homesitetw.com/uploads/images/gallery/2025-07/scaled-1680-/5a3image.png)](https://note.homesitetw.com/uploads/images/gallery/2025-07/5a3image.png)

#### **修改ADMIN TOKEN**  


[![image.png](https://note.homesitetw.com/uploads/images/gallery/2025-07/scaled-1680-/7UJimage.png)](https://note.homesitetw.com/uploads/images/gallery/2025-07/7UJimage.png)

#### **Nginx 反向代理設定**

```
server {
	listen 443 ssl;
	ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/xxx.com/privkey.pem;
	root /var/www/html;
	index index.php;
	server_name xxx.com;
	server_tokens off;
	location /vaultwarden/ {
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_pass http://ip/;
}
```

**瀏覽器輸入`https://xxx.com/vaultwarden/`**