Any security/privacy suggestions to securely host pihole with vaultwarden on a rpi? Looking at vaultwarden to use the TOTP features but not sure if its a good idea to have them in the same device or on separate containers? Thoughts?

  • SimonLeBonTon@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    you can put on the same machine (raspi):

    • pihole
    • vaultwarden
    • certbot (letsencrypt)
    • lighttpd

    Pihole and vaultwarden use HTTP socks, so no encryption

    That’s why you install the SSL certificate through letsencrypt and setup the reverse proxy from lighttpd to accept only HTTPS connections and reverse them locally to pihole and vaultwarden.

    To backup vaultwarden just crontab copying the /data folder to somewhere useful, like Github or Gdrive