Commit Graph

3 Commits

Author SHA1 Message Date
Paul Kartchner
2154ca1ce0 Add Vaultwarden backup system and fix HTTP header validation
- Added BACKUP.md with comprehensive backup/restore documentation
- Created backup-vaultwarden.sh for automated PostgreSQL and data backups
- Created restore-vaultwarden.sh for safe backup restoration
- Fixed HTTP response validation by configuring Vaultwarden-specific headers
- Set X-XSS-Protection: 0 (as required by Vaultwarden)
- Set X-Frame-Options: SAMEORIGIN for API calls
- Removed conflicting secure-headers@file middleware
- Added custom vaultwarden-headers middleware
- Updated .gitignore to exclude backups/ directory

Backup system:
- Backs up to /srv/backups/vaultwarden/ (configurable)
- Logs to /var/log/vaultwarden/backup.log
- 30-day retention policy
- Includes PostgreSQL database, RSA key, config, and .env

Note: Backup scripts should be moved to /srv/backups/scripts/ for production use

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-10 16:14:34 +00:00
Paul Kartchner
8bd2d71795 Clean up OAuth configuration files
- Removed get_gmail_refresh_token.py (no longer needed)
- Removed emailproxy-config/ directory (already deleted)
- Added Claude Code settings for easier development
- Switched to Amazon SES for email delivery (configured in .env)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-10 03:53:52 +00:00
Paul Kartchner
bf3ed29434 Initial Vaultwarden configuration with Amazon SES email
- Docker Compose setup with Traefik integration
- Amazon SES SMTP configuration (credentials in .env - not committed)
- Email verification and testing scripts
- Security: .gitignore excludes sensitive data (.env, data/, emailproxy-config/)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-10 03:41:06 +00:00