# Vaultwarden Deployment Reference (Core via Caddy)

**Server:** Core (netcup, 152.53.192.33)
**URL:** https://core.itpropartner.com/vault/
**Caddy:** handle_path /vault/* → reverse_proxy localhost:8080
**Image:** vaultwarden/server:latest
**Data volume:** vaultwarden-data


## ⚠️ DOMAIN env var pitfall (Jul 12, 2026)

**Setting `DOMAIN` causes Vaultwarden to return 404 on ALL routes.** Omit `DOMAIN` entirely. The Caddy reverse proxy handles URL routing transparently.

## Pending

- Replace plain-text ADMIN_TOKEN with Argon2 PHC string via `vaultwarden hash`
- Add Tailscale Serve to any future service needing internal HTTPS
- Set up SMTP if multi-user support is needed later