Listen on Unix Sockets

[shtrophic]

Is it possible to make vaultwarden listen on an unix socket instead of the network?
I am using a reverse proxy that handles the network connections. I think it would be preferable to tell the reverse proxy to forward it to a socket, since then you could leverage unix filesystem permissions to restrict other programs sending requests to vaultwarden, for additional defense in depth.

[BlackDex]

Not possible: rwf2/Rocket#1070

[VityaSchel]

are there any plans to implement this? :)

[BlackDex]

As long as there is no new release of Rocket this will not happen.

[VityaSchel]

As long as there is no new release of Rocket this will not happen.

Wasn't this implemented like 3 years ago?

[BlackDex]

In a non-stable release probably, But there has not been a new release of Rocket since May 2024, and the v0.5 release does not have this feature.

[unoukujou]

In a non-stable release probably, But there has not been a new release of Rocket since May 2024, and the v0.5 release does not have this feature.

@BlackDex maybe this can help:

https://crates.io/crates/rkt
https://github.com/rustfoo/rkt

I don't think Rocket is actively developed and Unix socket is really a good security and performance upgrade to have as an option.