https-and-reverse-proxy

Configure HTTPS for Vaultwarden via Caddy or Nginx with TLS certificates.

Updated Mar 6, 2026
One-click install
npx skills add https://github.com/renne/skills --skill https-and-reverse-proxy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: https-and-reverse-proxy
Source: https://github.com/renne/skills/tree/main/vaultwarden/https-and-reverse-proxy
Command: npx skills add https://github.com/renne/skills --skill https-and-reverse-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill guides users through setting up secure HTTPS connections for Vaultwarden, essential for its functionality with modern web browsers and mobile clients, by configuring reverse proxies or enabling direct TLS.

Core Features & Use Cases

  • Reverse Proxy Configuration: Provides detailed examples for Caddy and Nginx to handle TLS termination and proxy requests to Vaultwarden.
  • TLS Certificate Management: Explains how to obtain and use Let's Encrypt certificates or origin certificates from Cloudflare.
  • SSL Validation: Details methods to check certificate chains and OCSP stapling, crucial for mobile client compatibility.
  • Use Case: Securely expose your Vaultwarden instance to the internet by setting up Nginx as a reverse proxy with a valid Let's Encrypt certificate.

Quick Start

Configure your Caddyfile to automatically obtain Let's Encrypt certificates and proxy requests to Vaultwarden running on port 8000.

Frequently Asked Questions about https-and-reverse-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure HTTPS for Vaultwarden using a reverse proxy?

Configuring HTTPS for Vaultwarden involves using a reverse proxy like Nginx or Caddy to handle TLS termination and proxy requests to the application, ensuring secure encrypted communication.

Why does my Vaultwarden mobile client not connect without SSL?

Vaultwarden mobile clients require HTTPS because modern web browsers and mobile apps mandate secure SSL/TLS connections, making a reverse proxy with valid TLS certificates essential for compatibility.

Can I use Caddy to automatically obtain Let's Encrypt certificates for Vaultwarden?

Yes, Caddy can automatically obtain Let's Encrypt certificates for Vaultwarden by configuring the Caddyfile to proxy requests to the application instance, simplifying TLS certificate management.

What is the best way to validate SSL certificates and OCSP stapling for Vaultwarden?

Validating SSL certificates and OCSP stapling for Vaultwarden involves checking the certificate chains to ensure proper TLS configuration, which is crucial for maintaining mobile client compatibility.

Does this guide cover using Cloudflare origin certificates with Nginx for Vaultwarden?

Yes, the configuration covers using Cloudflare origin certificates or Let's Encrypt certificates with Nginx as a reverse proxy to securely expose your Vaultwarden instance to the internet.