When loading the Vaultwarden page, only the "vaultwarden" logo is displayed

[Worton1720]

Hello! I have been using Vaultwarden for about a month without any problems. Today, when trying to load the Vaultwarden web interface, instead of the usual page, only a page with the "vaultwarden" logo is displayed. I have made no changes to the configuration or the environment.

Additional information:

• Vaultwarden version: 1.34.3 (Docker container vaultwarden/server:latest)
• Using Traefik as a reverse proxy with HTTPS settings and HTTP redirect
• The container is running, logs do not show obvious errors on startup
• The issue appeared suddenly, without any visible changes in the system
• SSL certificate is valid

What I have tried:

• Clearing browser cache and cookies
• Restarting the container and Traefik
• Checking network connections and HTTPS certificates

Questions:

• Can someone suggest proven solutions to this problem?
• Is it worth trying to roll back to an earlier version of Vaultwarden?

Thank you in advance for your help!

Edited

I don't know what happened, but he corrected himself after a while.

[smwoodward]

I'm also seeing this.

[smwoodward]

I can't get it to format it properly, 🫤

I'm not sure how NPM handles the proxy_pass, but I did add this as a custom location and it added this under the location /

location / {

proxy_set_header Host $host;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_set_header X-Forwarded-Proto  $scheme;
proxy_set_header X-Forwarded-For    $remote_addr;
proxy_set_header X-Real-IP		$remote_addr;

proxy_pass       http://192.168.1.34:8000;



# Asset Caching

include conf.d/include/assets.conf;

Block Exploits

include conf.d/include/block-exploits.conf;

# Force SSL
include conf.d/include/force-ssl.conf;









proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_http_version 1.1;

}

[smwoodward]

Ahh ok, I see what it does. Inside the NPM container, there is a proxy.conf file that is used for the proxy_pass if there's not one listed in the configured conf file. This is what is in that file.

cat proxy.conf

add_header X-Served-By $host;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass $forward_scheme://$server:$port$request_uri;

[stefan0xC]

Can your npm container connect to your vaultwarden container? Are they in the same network?

[smwoodward]

Ok, so if I attach the Vaultwarden container to an IP address like in this picture, and change my NPM to use that IP address and port 80, it loads properly. This at least works, but strange if I use the docker proxynet. I haven't tried bridging the network yet.

---Ok I just tried it, if I move it to bridge instead of the proxynet, it works.

What's odd is all of my other containers use the proxynet and works properly with NPM, just this one stopped.

[Gerardv514]

You really need to go through this thread and redact your personal info. You should not be giving out your domain publicly, and your last screen shot has your argon admin token...this is a disaster waiting to happen!!

[BlackDex]

Well nothing changed on the Vaultwarden side.
But please provide some logs from the server and the reverse proxy during the attempts to access.

Either Vaultwarden isn't starting or the reverse proxy can't reach Vaultwarden

[Worton1720]

There are no problems in the Docker logs, but in the browser you can notice that the files weigh 0 bytes, maybe this is the problem. This behavior persists across browsers, on FireFox screenshots.

vaultwarden  | /--------------------------------------------------------------------\
vaultwarden  | |                        Starting Vaultwarden                        |
vaultwarden  | |                           Version 1.34.3                           |
vaultwarden  | |--------------------------------------------------------------------|
vaultwarden  | | This is an *unofficial* Bitwarden implementation, DO NOT use the   |
vaultwarden  | | official channels to report bugs/features, regardless of client.   |
vaultwarden  | | Send usage/configuration questions or feature requests to:         |
vaultwarden  | |   https://github.com/dani-garcia/vaultwarden/discussions or        |
vaultwarden  | |   https://vaultwarden.discourse.group/                             |
vaultwarden  | | Report suspected bugs/issues in the software itself at:            |
vaultwarden  | |   https://github.com/dani-garcia/vaultwarden/issues/new            |
vaultwarden  | \--------------------------------------------------------------------/
vaultwarden  | 
vaultwarden  | [2025-10-23 20:31:06.531][start][INFO] Rocket has launched from http://0.0.0.0:80
vaultwarden  | [2025-10-23 20:34:56.045][request][INFO] POST /identity/connect/token
vaultwarden  | [2025-10-23 20:34:56.046][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
vaultwarden  | [2025-10-23 20:39:56.420][request][INFO] POST /identity/connect/token
vaultwarden  | [2025-10-23 20:39:56.421][response][INFO] (login) POST /identity/connect/token => 400 Bad Request

[stefan0xC]

Well, it looks like you have something in front of your reverse proxy that overwrites the Content-Security-Policy for Vaultwarden and possibly even ejects some JavaScript into the web-vault:

So you probably need to either deactivate CloudFlare Insights or find a different provider if that was not you.

[smwoodward]

What im seeing, if I hit my do,aim name through the reverse proxy, it times out. If I go to the IP:port it loads the header and spinner and stays there. I'm also not seeing anything in the docker logs.

[smwoodward]

Your environment (Generated via diagnostics page)

• Vaultwarden version: v1.34.3
• Web-vault version: v2025.7.0
• OS/Arch: linux/x86_64
• Running within a container: true (Base: Debian)
• Database type: SQLite
• Database version: 3.50.2
• Uses config.json: true
• Uses a reverse proxy: false
• Internet access: true
• Internet access via a proxy: false
• DNS Check: true
• TZ environment: America/Chicago
• Browser/Server Time Check: true
• Server/NTP Time Check: true
• Domain Configuration Check: false
• HTTPS Check: true
• Websocket Check: true
• HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: SIGNUPS_ALLOWED, INVITATIONS_ALLOWED, ADMIN_TOKEN

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": true,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://***************************",
  "domain_origin": "*****://***************************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Vaultwarden",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "***************",
  "signups_verify": true,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": "Login",
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "**********************",
  "smtp_from_name": "Vaultwarden",
  "smtp_host": "****************",
  "smtp_password": "***",
  "smtp_port": 587,
  "smtp_security": "starttls",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": "**************************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Here's my support string.

Feel free to hit https://vaultwarden.thewoodwards.me

[Worton1720]

I switched to Caddy instead of Traefik (problem hasn't changed).

---

The Problem

I suspect the issue is that Cloudflare injects its own JavaScript into your page, but this script is being blocked by the Content-Security-Policy (CSP) set by Vaultwarden.

Is there any way to disable Cloudflare Insights (or any other Cloudflare features that automatically inject JavaScript) for the domain vaultwarden.worton-place.ru?

---

Why This Is Not Related to Caddy

The current Caddy configuration (docker-compose.yml and Caddyfile) is absolutely correct and is not the source of the problem.

1. Caddy acts as a "transparent" proxy between Cloudflare and Vaultwarden.
2. It does not add a Content-Security-Policy (CSP) header in its configuration, so it does not conflict with the CSP that Vaultwarden itself sends.

---

docker-compose.yml

---

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    
    environment:
      DOMAIN: "https://vaultwarden.worton-place.ru"
      WEBSOCKET_ENABLED: "true" 
      ADMIN_TOKEN: "*******"
      SIGNUPS_ALLOWED: "true"
      
    volumes:
      - ./data:/data/
    
    networks:
      - proxy

  caddy:
    image: caddy:latest
    container_name: caddy
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
      
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - ./caddy_data:/data
      
    networks:
      - proxy
      
networks:
  proxy:
    external: true

---

Caddyfile

vaultwarden.worton-place.ru {
  
  tls [email protected]
  
  header {
    Strict-Transport-Security "max-age=31536000;"
    X-Frame-Options "SAMEORIGIN"
    X-XSS-Protection "1; mode=block"
    X-Content-Type-Options "nosniff"
  }

  reverse_proxy /notifications/hub vaultwarden:3012
  
  reverse_proxy vaultwarden:80
}

---

docker compose logs

caddy  | {"level":"info","ts":1761346044.0474842,"msg":"maxprocs: Leaving GOMAXPROCS=1: CPU quota undefined"}
caddy  | {"level":"info","ts":1761346044.0480623,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":906452582,"previous":9223372036854775807}
caddy  | {"level":"info","ts":1761346044.0482574,"msg":"using config from file","file":"/etc/caddy/Caddyfile"}
caddy  | {"level":"info","ts":1761346044.0503995,"msg":"adapted config to JSON","adapter":"caddyfile"}
caddy  | {"level":"warn","ts":1761346044.0505066,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":3}
caddy  | {"level":"info","ts":1761346044.0518112,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]}
caddy  | {"level":"info","ts":1761346044.0520666,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv0","https_port":443}
caddy  | {"level":"info","ts":1761346044.0521305,"logger":"http.auto_https","msg":"enabling automatic HTTP->HTTPS redirects","server_name":"srv0"}
caddy  | {"level":"info","ts":1761346044.052429,"logger":"http","msg":"enabling HTTP/3 listener","addr":":443"}
caddy  | {"level":"info","ts":1761346044.0525818,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
caddy  | {"level":"info","ts":1761346044.0527213,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
caddy  | {"level":"warn","ts":1761346044.052798,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy  | {"level":"warn","ts":1761346044.0528421,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
caddy  | {"level":"info","ts":1761346044.0528708,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
caddy  | {"level":"info","ts":1761346044.0528953,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["vaultwarden.worton-place.ru"]}
caddy  | {"level":"info","ts":1761346044.0545342,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
caddy  | {"level":"info","ts":1761346044.0545437,"msg":"serving initial configuration"}
caddy  | {"level":"info","ts":1761346044.055051,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"03a86dff-b907-412f-b388-3b7b070309c3","try_again":1761432444.0550501,"try_again_in":86399.99999963}
caddy  | {"level":"info","ts":1761346044.0551035,"logger":"tls","msg":"finished cleaning storage units"}
caddy  | {"level":"info","ts":1761346044.0553746,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0xc00089d180"}
caddy  | {"level":"info","ts":1761360444.8932672,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766354520,"recheck_after":1761382044.8932562,"explanation_url":""}
caddy  | {"level":"info","ts":1761360444.894437,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761382044.8932562,"explanation_url":""}
caddy  | {"level":"info","ts":1761382644.8080974,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766476469,"recheck_after":1761404244.8080876,"explanation_url":""}
caddy  | {"level":"info","ts":1761382644.8092167,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761404244.8080876,"explanation_url":""}
caddy  | {"level":"info","ts":1761404844.6987693,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766505591,"recheck_after":1761426444.6987634,"explanation_url":""}
caddy  | {"level":"info","ts":1761404844.6997755,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761426444.6987634,"explanation_url":""}
caddy  | {"level":"info","ts":1761427044.7130303,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766501626,"recheck_after":1761448644.71302,"explanation_url":""}
caddy  | {"level":"info","ts":1761427044.714162,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761448644.71302,"explanation_url":""}
caddy  | {"level":"info","ts":1761432444.0580606,"logger":"tls","msg":"cleaning storage unit","storage":"FileStorage:/data/caddy"}
caddy  | {"level":"info","ts":1761432444.0596077,"logger":"tls","msg":"finished cleaning storage units"}
caddy  | {"level":"info","ts":1761449244.783801,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766355221,"recheck_after":1761470844.7837913,"explanation_url":""}
caddy  | {"level":"info","ts":1761449244.785531,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761470844.7837913,"explanation_url":""}
caddy  | {"level":"info","ts":1761471444.637652,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766455309,"recheck_after":1761493044.6376421,"explanation_url":""}
caddy  | {"level":"info","ts":1761471444.6388223,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761493044.6376421,"explanation_url":""}
caddy  | {"level":"info","ts":1761493644.7846048,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766363651,"recheck_after":1761515244.7845902,"explanation_url":""}
caddy  | {"level":"info","ts":1761493644.7858498,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761515244.7845902,"explanation_url":""}
caddy  | {"level":"info","ts":1761515844.791862,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766497683,"recheck_after":1761537444.791852,"explanation_url":""}
caddy  | {"level":"info","ts":1761515844.7929113,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761537444.791852,"explanation_url":""}
caddy  | {"level":"info","ts":1761518844.055196,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"03a86dff-b907-412f-b388-3b7b070309c3","try_again":1761605244.0551925,"try_again_in":86399.999999309}
caddy  | {"level":"info","ts":1761518844.0552835,"logger":"tls","msg":"finished cleaning storage units"}
caddy  | {"level":"info","ts":1761538045.061467,"msg":"got renewal info","names":["vaultwarden.worton-place.ru"],"window_start":1766353644,"window_end":1766509093,"selected_time":1766357730,"recheck_after":1761559645.0614572,"explanation_url":""}
caddy  | {"level":"info","ts":1761538045.0626342,"logger":"tls.cache.maintenance","msg":"updated and stored ACME renewal information","identifiers":["vaultwarden.worton-place.ru"],"cert_hash":"893b4fc3b6f70c6d9f83bf41724a169c291de2d390a3583e28b415f4632c7491","ari_unique_id":"jw0TovYuftFQbDMYOF1ZjiNykco.BqH379KafuZn9Sr0UZCMuQ9c","cert_expiry":1769022199,"selected_time":1766408496,"next_update":1761559645.0614572,"explanation_url":""}
vaultwarden  | /--------------------------------------------------------------------\
vaultwarden  | |                        Starting Vaultwarden                        |
vaultwarden  | |                           Version 1.34.3                           |
vaultwarden  | |--------------------------------------------------------------------|
vaultwarden  | | This is an *unofficial* Bitwarden implementation, DO NOT use the   |
vaultwarden  | | official channels to report bugs/features, regardless of client.   |
vaultwarden  | | Send usage/configuration questions or feature requests to:         |
vaultwarden  | |   https://github.com/dani-garcia/vaultwarden/discussions or        |
vaultwarden  | |   https://vaultwarden.discourse.group/                             |
vaultwarden  | | Report suspected bugs/issues in the software itself at:            |
vaultwarden  | |   https://github.com/dani-garcia/vaultwarden/issues/new            |
vaultwarden  | \--------------------------------------------------------------------/
vaultwarden  | 
vaultwarden  | [2025-10-24 22:47:23.956][start][INFO] Rocket has launched from http://0.0.0.0:80
vaultwarden  | [2025-10-24 22:51:33.189][request][INFO] POST /identity/connect/token
vaultwarden  | [2025-10-24 22:51:33.189][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
vaultwarden  | [2025-10-25 06:35:12.486][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:12.748][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:12.809][request][INFO] GET /api/.env
vaultwarden  | [2025-10-25 06:35:12.809][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:12.809][response][INFO] (web_files) GET /<p..> [10] => 422 Unprocessable Entity
vaultwarden  | [2025-10-25 06:35:12.870][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:12.932][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:12.993][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:13.055][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:13.116][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 06:35:13.177][vaultwarden::api::web::_][WARN] Parameter guard `p: PathBuf` is forwarding: BadStart('.').
vaultwarden  | [2025-10-25 10:32:32.190][request][INFO] POST /identity/connect/token
vaultwarden  | [2025-10-25 10:32:32.191][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
vaultwarden  | [2025-10-25 10:37:35.253][request][INFO] POST /identity/connect/token
vaultwarden  | [2025-10-25 10:37:35.254][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
vaultwarden  | [2025-10-25 10:42:35.610][request][INFO] POST /identity/connect/token

[Worton1720]

Does it make sense to try to recreate/reconfigure the server to save the data directory with the vaultwarden data?

[tschubaki]

I have the same problem, tried downgrading the version but nothing changed. If im trying to reach the webvault via my custom url it times out without any logs in the vaultwarden container. But if im trying to reach the admin panel it works. No clue why.

Your environment (Generated via diagnostics page)

• Vaultwarden version: v1.34.3
• Web-vault version: v2025.7.0
• OS/Arch: linux/x86_64
• Running within a container: true (Base: Debian)
• Database type: SQLite
• Database version: 3.50.2
• Uses config.json: true
• Uses a reverse proxy: false
• Internet access: true
• Internet access via a proxy: false
• DNS Check: true
• Browser/Server Time Check: true
• Server/NTP Time Check: true
• Domain Configuration Check: false
• HTTPS Check: true
• Websocket Check: true
• HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: DOMAIN, ADMIN_TOKEN, YUBICO_CLIENT_ID, YUBICO_SECRET_KEY

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://**************************",
  "domain_origin": "*****://**************************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Vaultwarden",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": "/data/vaultwarden.log",
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": false,
  "signups_domains_whitelist": "",
  "signups_verify": true,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": "Login",
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "********************",
  "smtp_from_name": "Bitwarden",
  "smtp_host": "****************",
  "smtp_password": "***",
  "smtp_port": 587,
  "smtp_security": "starttls",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": "*************************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": true,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": "76794",
  "yubico_secret_key": "***",
  "yubico_server": null
}

[BlackDex]

It seems your domain isn't correct, or you are accessing the admin interface via a different domain/ip.

The frontend only works with HTTPS, be sure that it is correct.
Best to check the Browsers Developer Console and see what error is reported there, that will probably help resolving your issue.