Bitwarden Lite behind Traefik

Ask the Community Password Manager
, , ,
1

Hello

Has anyone tried and succeeded in setting up Bitwarden Lite behind Traefik?

Thanks in advance

2

Yes, Bitwarden Lite can run behind Traefik, but you need to adjust the setup carefully. The Bitwarden container should listen on a non‑standard port (like 8080) while Traefik handles HTTPS termination and routing through labels in Docker Compose. Configure Traefik with proper entrypoints, certificates, and a router rule for your domain (e.g., vault.example.com). The main pitfalls are port conflicts—since Bitwarden defaults to 80/443—and ensuring your service account and firewall rules allow traffic to flow only through Traefik.

3

I’ve been trying to get it to work with little success so far.

I’ve set the port to 8080. As you suggested, Traefik is handling the TLS termination. I can get to the main UI but when I try to create an account it gives a generic error message “An error has occurred. An unexpected error has occurred.”

Checking the logs for the identity service, I can see the following

Request starting "HTTP/1.0" "POST" "http"://"bitwarden.mydomain.com""""/identity/accounts/register/send-verification-email""" - "application/json; charset=utf-8" 74 (d509f86a)

Followed by

CORS policy execution failed. (09b6f179)

Followed by

Request origin "https://bitwarden.mydomain.com" does not have permission to access the resource. (a03d560b)

I suspect this is because Traefik is redirecting all http requests to https.

How can I overcome this?