richardneililagan/vaultwarden-ecs-fargate

Deploy your own self-hosted deployment of Vaultwarden on AWS.

vaultwarden-ecs-fargate's Issues

[help] SMTP traffic allowed ?

Hello,

I'm trying to use your codebase to deploy vaultwarden on AWS. I have it up and running (with some modification on certificate because I wanted to use an existing one) but now I'm trying to setup SMTP email and I'm stuck.

I tested Office365, Mailjet and Gmail with no luck. I have this kind of errors :

[2023-06-29 14:04:05.700][vaultwarden::mail][ERROR] SMTP timeout error: Connection error: connection timed out
[2023-06-29 13:35:33.488][vaultwarden::mail][ERROR] SMTP error: Connection error: Network is unreachable (os error 101)

I'm guessing that it should be related to inbound/outbound configuration on 465 (or 587) ports but I'm not really sure. Is SMTP supposed to work out of the box with your codebase or do I need to add some extra configuration for it ?

Thank you !

Provide means to configure the Vaultwarden image / container

The vaultwarden/server container that runs in the Vaultwarden service is running on default settings only. It would be useful if users could configure the container itself (see Vaultwarden configuration documentation here).

Some critical features that this can unlock are:

• disabling user registration
• enabling the admin page
• logging
• enabling hardware authentication
• etc

Getting error on running script

Getting this go runtme error when running yarn cdk deploy can anyone help? @richardneililagan

Implement horizontal scaling rules for Vaultwarden service

As it stands, the current deployment only sets the Vaultwarden service to a desired task count of 1. While this is sufficient for ensuring that the service recovers when the task fails for any reason, horizontal scaling is essential for deployments that expect a particularly high amount of usage.

Image repository

Should image repository be replaced image pull thru cache?

https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-ecr-cache-repositories/

https://docs.aws.amazon.com/AmazonECR/latest/userguide/pull-through-cache.html

vaultwarden-ecs-fargate/src/stacks/vaultwarden/constructs/image-repository.ts

Line 21 in 567f4b0

class ImageRepository extends Construct {

Include design + architectural considerations

For something as sensitive as a self-hosted password manager, it's very important that it's clear what exactly gets deployed (and how!) without having to try it out first.