---
title: "Deploy Vaultwarden Self-Hosted (Docker)"
description: "Step-by-step guide to self-hosting Vaultwarden with Docker Compose. "
---

# Deploy Vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.

<div className="deploy-hero">
  <span className="deploy-hero-item">⭐ 32.0k stars</span>
  <span className="deploy-hero-item">📜 AGPL-3.0</span>
  <span className="deploy-hero-item">🔴 Advanced</span>
  <span className="deploy-hero-item">⏱ ~20 minutes</span>
  
</div>

<div className="mt-8 mb-4">
  <a 
    href="https://m.do.co/c/2ed27757a361" 
    target="_blank" 
    rel="noopener noreferrer"
    className="flex items-center justify-center w-full px-6 py-4 text-lg font-bold text-white transition-all bg-blue-600 rounded-xl hover:bg-blue-700 hover:scale-[1.02] shadow-lg shadow-blue-500/30"
  >
    🚀 Deploy on DigitalOcean ($200 Free Credit)
  </a>
</div>


## What You'll Get

A fully working Vaultwarden instance running on your server. Your data stays on your hardware — no third-party access, no usage limits, no surprise invoices.

## Prerequisites

- A server with Docker and Docker Compose installed ([setup guide](/quick-start/choosing-a-server))
- A domain name pointed to your server (optional but recommended)
- Basic terminal access (SSH)

## The Config

Create a directory for Vaultwarden and add this `docker-compose.yml`:

```yaml
# -------------------------------------------------------------------------
# 🚀 Created and distributed by The AltStack
# 🌍 https://thealtstack.com
# -------------------------------------------------------------------------

version: '3.8'

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: unless-stopped
    ports:
      - "8080:80"
    volumes:
      - vw-data:/data
    environment:
      - WEBSOCKET_ENABLED=true
      - SIGNUPS_ALLOWED=true

volumes:
  vw-data:
```

## Let's Ship It

```bash
# Create a directory
mkdir -p /opt/vaultwarden && cd /opt/vaultwarden

# Create the docker-compose.yml (paste the config above)
nano docker-compose.yml

# Pull images and start
docker compose up -d

# Watch the logs
docker compose logs -f
```

## Environment Variables

| Variable | Default | Required |
|---|---|---|
| `WEBSOCKET_ENABLED` | `true` | No |
| `SIGNUPS_ALLOWED` | `true` | No |


## Post-Deployment Checklist

- [ ] Service is accessible on the configured port
- [ ] Admin account created (if applicable)
- [ ] Reverse proxy configured ([Caddy guide](/concepts/reverse-proxies))
- [ ] SSL/HTTPS working
- [ ] Backup script set up ([backup guide](/concepts/backups))
- [ ] Uptime monitor added ([Uptime Kuma](/deploy/uptime-kuma))

## The "I Broke It" Section

**Container won't start?**
```bash
docker compose logs vaultwarden | tail -50
```

**Port already in use?**
```bash
# Find what's using the port
lsof -i :PORT_NUMBER
```

**Need to start fresh?**
```bash
docker compose down -v  # ⚠️ This deletes volumes/data!
docker compose up -d
```

## Going Further

- [Vaultwarden on AltStack Directory](https://thealtstack.com/alternative-to/vaultwarden)
- [Vaultwarden Self-Hosted Guide](https://thealtstack.com/self-hosted/vaultwarden)
- [Official Documentation](https://github.com/dani-garcia/vaultwarden)
- [GitHub Repository](https://github.com/dani-garcia/vaultwarden)