Patch/minor bumps: - akaunting: 3.1.21 -> 3.2.3 - aptly: 1.6.2 -> 1.6.3 - baserow: 2.2.2 -> 2.4.1 - crowdsec: v1.7.8 -> v1.8.1 - docker-registry: 3.0.0 -> 3.1.2 - etherpad: 2.2.7 -> 2.6.1 - headlamp: v0.42.0 -> v0.46.0 - headscale: 0.29.1 -> 0.29.5 - indico: 3.3.12 -> 3.3.14 - karrot: v17.4.1 -> v17.4.2 - keila: 0.17.1 -> 0.30.3 - lemmy: 0.19.15 -> 0.19.19 - loomio: 3.0.24 -> 3.12.0 - mastodon: 4.5.3 -> 4.7.3 - mautic: 7.1.2 -> 7.2.1 - memcached: 1.6.32 -> 1.6.45 - mobilizon: 5.2.3 -> 5.2.4 - nocodb: 2026.04.1 -> 2026.09.1 - open-webui: 0.9.5 -> 0.12.3 - outline: 1.8.1 -> 1.11.0 - peertube: 8.2.1 -> 8.2.4 - pixelfed: 0.12.7 -> 0.15.1 - pretix: 2026.5.1 -> 2026.8.0 - synapse: v1.144.0 -> v1.163.0 - traefik: v3.4.1 -> v3.7.16 - typebot: 3.17.1 -> 3.19.1 - vaultwarden: 1.37.1 -> 1.37.4 - writefreely: 0.15.1 -> 0.17.2 Multi-file updates for apps with workers/sidekiq/streaming: - mastodon (5 files), indico (3 files), karrot (4 files), lemmy (2 files), loomio (2 files), typebot (2 files), pixelfed (2 files), synapse (2 refs), pretix (2 refs), aptly (2 refs)
Vaultwarden
Vaultwarden is a lightweight, self-hosted Bitwarden-compatible password manager server. It's compatible with all official Bitwarden clients (browser extensions, desktop apps, mobile apps).
Dependencies
- PostgreSQL - Database for storing vault data
- SMTP - For sending verification emails and emergency access notifications
Configuration
Key settings in config.yaml:
- domain - Where Vaultwarden will be accessible (required for client connections)
- signupsAllowed - Whether new users can self-register (
"true"or"false") - storage - Persistent volume size for attachments and icons (default:
1Gi) - smtp - Email settings inherited from your Wild Cloud SMTP service
First-Time Setup
-
Add and deploy the app:
wild app add vaultwarden wild app deploy vaultwarden -
Register your admin account by visiting the app URL and clicking Create Account.
-
Log in to the admin panel at
/adminusing theadminTokenfrom yoursecrets.yaml. From here you can:- Disable signups so no other users can self-register
- Invite specific users by email
- View server diagnostics
-
Install the Bitwarden client (browser extension, desktop app, or mobile app), then set the server URL to your Vaultwarden domain before logging in.
Notes
- Vaultwarden is fully compatible with the official Bitwarden clients — set your server URL in the client settings before creating an account
- The
adminTokensecret is the password for the/adminpanel — treat it like a root password - Set
signupsAllowed: "false"in your config after creating your account to prevent others from registering - Attachments and icons are stored on the persistent volume; back it up along with your PostgreSQL database
- TOTP (authenticator app) two-factor authentication works out of the box; email-based 2FA requires SMTP