mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-05-22 16:14:20 -05:00
[GH-ISSUE #6301] No IPv6 fallback for domain resolution #15184
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @fabiopicchi on GitHub (Sep 18, 2025).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6301
Originally assigned to: @BlackDex on GitHub.
Prerequisites
Vaultwarden Support String
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)
Show Config & Details
Config:
Vaultwarden Build Version
v1.34.3
Deployment method
Official Container Image
Custom deployment method
Hi! I am using Vaultwarden for quite some time now and I recently moved it to an IPv6-only VPC from Hetzner to cut costs.
However, it seems that icon downloads stop working altogether. From what I could debug, the issue seems to be related to reqwest (or, at a lower level, hickory). Even though it can solve the domain name, it defaults to the IPv4 address with no fallback to IPv6.
Ideally, this configuration should be exposed in Vaultwarden.
Reverse Proxy
nginx 1.29.1
Host/Server Operating System
Linux
Operating System Version
Ubuntu 22.04.3 LTS
Clients
Web Vault
Client Version
v2025.7.0
Steps To Reproduce
Expected Result
Icons are downloaded through their IPv6 addresses.
Actual Result
An attempt is made to download it through IPv4, it times out, and no icon is downloaded.
Logs
Screenshots or Videos
No response
Additional Context
No response
@BlackDex commented on GitHub (Nov 25, 2025):
Should be resolved via #6494.
It will still resolve IPv4 records when there are no IPv6 records.
For this I would recommend to setup a DNS64+NAT64 or use a public service, either Public DNS64 + own NAT64 or both Public services. Some information can be found here: https://nat64.net/public-providers
For example, github.com will not work on IPv6 only systems, and a DNS64+NAT64 is mandatory for this to work as far as I know.