Micha 23a6975a67 Restrict Vaultwarden /admin to trusted networks (Tailscale + LAN) ...

Audit 2026-06-23 (P1): /admin was publicly reachable (200). Add a higher-priority Traefik router scoped to PathPrefix(/admin) with an ipallowlist middleware (Tailnet 100.64.0.0/10 + LAN 192.168.178.0/24); the main router stays native for browser and mobile clients. Documented in docs/DECISIONS.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-23 11:03:26 +02:00

..

docker-compose.yml

Restrict Vaultwarden /admin to trusted networks (Tailscale + LAN)

2026-06-23 11:03:26 +02:00