Describe the problem
Get 504 when accessing Vaultwarden Docker on the LAN.
I’m using example.com in place of my real domain.
My network setup:
In my home network, I have everything behind a Sophos Firewall. On the LAN, I run Windows DNS and DHCP servers. I setup split DNS so I can access my services locally or remotely, using the same URL’s (e.g., https://www.example.com). The Sophos acts as a WAF/reverse-proxy when accessing my services remotely, and terminates TLS. I have a Linux VM on the LAN with Docker Nginx Proxy Manager (NPM) installed on it. It acts as the reverse-proxy and terminates TLS when accessing my services from within the LAN. Some services are also installed on the same NPM server. Other services are installed on different local servers. I have Vaultwarden installed on the NPM server. It does not have public DNS and is only accessible from the LAN and remotely via the Sophos VPN. The Sophos reverse-proxy, for other services, points directly to the services’ local IP/ports. and not the NPM server. Hope this makes sense.
My Netbird setup:
I installed Netbird server on an AlmaLinux 10 public VPS (https://netbird.example.com). I added NB_PROXY_PRIVATE=true to the env file so it can be used as a private proxy. I do not (unless necessary) want to install the Netbird client on the NPM server, mentioned above. I do have the client installed on another computer, on the LAN and it is set as a Netbird Resource with Address vaultwarden.example.com. I created a Reverse Proxy → Service with it’s Target being the HTTPS URL of the Vaultwarden server instance (https://vaultwarden.example.com). This URL is the same one specified in the Vaultwarden docker compose file. Access to Vaultwarden is restricted to specific Netbird peers.
To Reproduce
Steps to reproduce the behavior:
- Go to valtwarden.netbird.example.com
- Get 504 error.
Expected behavior
Access Vaultwarden remotely via Netbird Peer.
Are you using NetBird Cloud?
No
NetBird version
0.78.1
Is any other VPN software installed?
Not on Netbird server. Have Sophos Connect clients are installed on client computers but disconnected.
Debug output
To help us resolve the problem, please attach the following anonymized status output
netbird status -dA
Peers detail:
optiplex-7000.netbird.selfhosted:
NetBird IP: 100.64.83.136
NetBird IPv6: 2001:db8:ffff::
Public key: pE3kQcQNFNFEAO0TM5RTZBIledvnrGB90gClUMsHm3o=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
optiplex-7070.netbird.selfhosted:
NetBird IP: 100.64.204.142
NetBird IPv6: 2001:db8:ffff::1
Public key: cxQ4CCYZeEG2cPoNVD4CBHfS3Y4VbovlZwJqi4OUX2U=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
pixel9.netbird.selfhosted:
NetBird IP: 100.64.245.193
NetBird IPv6: 2001:db8:ffff::2
Public key: gCtZDLvaUVd96KIXZRvzdb2mn6qZIJGksNJTS+TqWHk=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 45 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s
Events:
[INFO] SYSTEM (16aa7033-1aa3-4589-8014-c5fde507fa2b)
Message: daemon config changed (source=up_rpc)
Time: 46 seconds ago
Metadata: source: up_rpc, type: config_changed
[INFO] SYSTEM (edaca101-009d-41b3-a21b-2d3d969b1c4c)
Message: Network map updated
Time: 45 seconds ago
OS: linux/amd64
Daemon version: 0.78.1
CLI version: 0.78.1
Profile: default
Management: Connected to https://nb.anon-qxR5k.domain:443
Signal: Connected to https://nb.anon-qxR5k.domain:443
Relays:
[stun:nb.anon-qxR5k.domain:3478] is Available
[rels://nb.anon-qxR5k.domain:443] is Available via ws
Nameservers:
FQDN: nb.netbird.selfhosted
NetBird IP: 100.64.116.206/16
NetBird IPv6: 2001:db8:ffff::3/64
Interface type: Kernel
Wireguard port: 32869
Quantum resistance: false
Lazy connection: true
SSH Server: Disabled
Networks: -
Peers count: 0/3 Connected
Have you tried these troubleshooting steps?
- Reviewed client troubleshooting (if applicable)
- Checked for newer NetBird versions
- Searched for similar issues on GitHub (including closed ones)
- Restarted the NetBird client
- Disabled other VPN software
- Checked firewall settings