Originally created by @Moritz921 on GitHub (Aug 14, 2025).
Environment settings which are overridden: ADMIN_TOKEN
Failed HTTP Checks:
2FA Connector calls: Header: 'x-frame-options' is present while it should not Header: 'content-security-policy' is present while it should not
Config:
{ "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "/opt/vaultwarden/data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "/opt/vaultwarden/data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "********************************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://***************************", "domain_origin": "*****://***************************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "/opt/vaultwarden/data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "/opt/vaultwarden/data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "/opt/vaultwarden/data/sends", "show_password_hint": false, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "", "smtp_from_name": "Vaultwarden", "smtp_host": null, "smtp_password": null, "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": null, "templates_folder": "/opt/vaultwarden/data/templates", "tmp_folder": "/opt/vaultwarden/data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "/opt/vaultwarden/web-vault", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null }
1.34.1-ce70cd2c
Other method
I installed it via the Proxmox Community Script (https://community-scripts.github.io/ProxmoxVE/scripts?id=vaultwarden), which in turn installs it with building from source and deploying with systemd.
I have installed
1.1.1w-0+deb11u3
1.7.4~git20210206+dcf529b-3
nginx 1.28.0
Linux
Debian 11
Web Vault
v2025.7.0
or
cargo build --features "sqlite,mysql,postgresql" --release
Build the binary without an issue.
Raised an error while installing rustfmt because of outdated openssl version for webauthn-attestation-ca.
info: syncing channel updates for '1.89.0-x86_64-unknown-linux-gnu' info: latest update on 2025-08-07, rust version 1.89.0 (29483883e 2025-08-04) info: downloading component 'cargo' info: downloading component 'clippy' info: downloading component 'rust-std' info: downloading component 'rustc' info: downloading component 'rustfmt' info: installing component 'cargo' info: installing component 'clippy' info: installing component 'rust-std' info: installing component 'rustc' info: installing component 'rustfmt' Updating crates.io index Downloaded async-process v2.4.0 Downloaded asn1-rs-impl v0.2.0 Downloaded asn1-rs-derive v0.5.1 Downloaded async-io v2.5.0 Downloaded async-signal v0.2.12 Downloaded sec1 v0.7.3 Downloaded group v0.13.0 Downloaded triomphe v0.1.14 Downloaded backon v1.5.2 Downloaded dyn-clone v1.0.20 Downloaded lazy_static v1.5.0 Downloaded ff v0.13.1 Downloaded crc32fast v1.5.0 Downloaded dashmap v5.5.3 Downloaded curve25519-dalek-derive v0.1.1 Downloaded cached_proc_macro v0.25.0 Downloaded base64urlsafedata v0.5.2 Downloaded asn1-rs v0.6.2 Downloaded webauthn-attestation-ca v0.5.2 Downloaded serde_plain v1.0.2 Downloaded serde_path_to_error v0.1.17 Downloaded async-lock v3.4.1 Downloaded hex v0.4.3 Downloaded const-oid v0.9.6 Downloaded indexmap v1.9.3 Downloaded base16ct v0.2.0 Downloaded ed25519 v2.2.3 Downloaded webauthn-rs-proto v0.5.2 Downloaded signature v2.2.0 Downloaded serde-value v0.7.0 Downloaded spki v0.7.3 Downloaded ordered-float v2.10.1 Downloaded num-iter v0.1.45 Downloaded oid-registry v0.7.1 Downloaded rusticata-macros v4.1.0 Downloaded slab v0.4.11 Downloaded rfc6979 v0.4.0 Downloaded ecdsa v0.16.9 Downloaded primeorder v0.13.6 Downloaded serde_with_macros v3.14.0 Downloaded webauthn-rs v0.5.2 Downloaded signal-hook-registry v1.4.6 Downloaded pkcs1 v0.7.5 Downloaded cached v0.56.0 Downloaded toml_parser v1.0.2 Downloaded serde_cbor_2 v0.12.0-dev Downloaded rustc_version v0.4.1 Downloaded async-compression v0.4.27 Downloaded toml v0.9.5 Downloaded der v0.7.10 Downloaded mini-moka v0.10.3 Downloaded elliptic-curve v0.13.8 Downloaded p256 v0.13.2 Downloaded socket2 v0.6.0 Downloaded der-parser v9.0.0 Downloaded polling v3.10.0 Downloaded litrs v0.4.2 Downloaded schemars v0.9.0 Downloaded schemars v1.0.4 Downloaded x509-parser v0.16.0 Downloaded hashbrown v0.12.3 Downloaded zerovec v0.11.4 Downloaded webauthn-rs-core v0.5.2 Downloaded openidconnect v4.0.1 Downloaded itertools v0.10.5 Downloaded tokio-util v0.7.16 Downloaded serde_json v1.0.142 Downloaded hkdf v0.12.4 Downloaded serde_with v3.14.0 Downloaded p384 v0.13.1 Downloaded h2 v0.4.12 Downloaded lettre v0.11.18 Downloaded webpki-roots v1.0.2 Downloaded curve25519-dalek v4.1.3 Downloaded hashbrown v0.15.5 Downloaded governor v0.10.1 Downloaded ed25519-dalek v2.2.0 Downloaded cc v1.2.32 Downloaded rustls v0.23.31 Downloaded rustix v1.0.8 Downloaded rand v0.9.2 Downloaded num-bigint-dig v0.8.4 Downloaded hyper-util v0.1.16 Downloaded rsa v0.9.8 Downloaded oauth2 v5.0.0 Downloaded crypto-bigint v0.5.5 Downloaded futures-lite v2.6.1 Downloaded event-listener v5.4.1 Downloaded pkcs8 v0.10.2 Downloaded pem-rfc7468 v0.7.0 Downloaded opendal v0.54.0 Downloaded tokio v1.47.1 Downloaded 92 crates (7.7MiB) in 2.69s Compiling proc-macro2 v1.0.95 Compiling unicode-ident v1.0.18 Compiling libc v0.2.174 Compiling cfg-if v1.0.1 Compiling version_check v0.9.5 Compiling autocfg v1.5.0 Compiling serde v1.0.219 Compiling shlex v1.3.0 Compiling smallvec v1.15.1 Compiling memchr v2.7.5 Compiling portable-atomic v1.11.1 Compiling zeroize v1.8.1 Compiling itoa v1.0.15 Compiling critical-section v1.2.0 Compiling parking_lot_core v0.9.11 Compiling scopeguard v1.2.0 Compiling pin-project-lite v0.2.16 Compiling subtle v2.6.1 Compiling bytes v1.10.1 Compiling log v0.4.27 Compiling pkg-config v0.3.32 Compiling typenum v1.18.0 Compiling lock_api v0.4.13 Compiling generic-array v0.14.7 Compiling futures-core v0.3.31 Compiling stable_deref_trait v1.2.0 Compiling const-oid v0.9.6 Compiling zerocopy v0.8.26 Compiling libm v0.2.15 Compiling num-traits v0.2.19 Compiling allocator-api2 v0.2.21 Compiling quote v1.0.40 Compiling futures-sink v0.3.31 Compiling futures-io v0.3.31 Compiling percent-encoding v2.3.1 Compiling slab v0.4.11 Compiling syn v2.0.104 Compiling once_cell v1.21.3 Compiling num-conv v0.1.0 Compiling time-core v0.1.4 Compiling jobserver v0.1.33 Compiling litemap v0.8.0 Compiling writeable v0.6.1 Compiling futures-channel v0.3.31 Compiling futures-task v0.3.31 Compiling time-macros v0.2.22 Compiling getrandom v0.2.16 Compiling signal-hook-registry v1.4.6 Compiling cc v1.2.32 Compiling mio v1.0.4 Compiling socket2 v0.6.0 Compiling rand_core v0.6.4 Compiling parking_lot v0.12.4 Compiling icu_normalizer_data v2.0.0 Compiling icu_properties_data v2.0.1 Compiling pin-utils v0.1.0 Compiling vcpkg v0.2.15 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.6 Compiling digest v0.10.7 Compiling fnv v1.0.7 Compiling httparse v1.10.1 Compiling bitflags v2.9.1 Compiling powerfmt v0.2.0 Compiling tracing-core v0.1.34 Compiling utf8_iter v1.0.4 Compiling foldhash v0.1.5 Compiling deranged v0.4.0 Compiling num_threads v0.1.7 Compiling equivalent v1.0.2 Compiling hashbrown v0.15.5 Compiling form_urlencoded v1.2.1 Compiling getrandom v0.3.3 Compiling untrusted v0.9.0 Compiling http v1.3.1 Compiling base64ct v1.8.0 Compiling ident_case v1.0.1 Compiling strsim v0.11.1 Compiling ppv-lite86 v0.2.21 Compiling cookie v0.18.1 Compiling semver v1.0.26 Compiling ryu v1.0.20 Compiling serde_json v1.0.142 Compiling thiserror v1.0.69 Compiling thiserror v2.0.12 Compiling num-integer v0.1.46 Compiling pem-rfc7468 v0.7.0 Compiling proc-macro2-diagnostics v0.10.1 Compiling tower-service v0.3.3 Compiling time v0.3.41 Compiling cpufeatures v0.2.17 Compiling ring v0.17.14 Compiling openssl-sys v0.9.109 Compiling try-lock v0.2.5 Compiling openssl v0.10.73 Compiling want v0.3.1 Compiling der v0.7.10 Compiling yansi v1.0.1 Compiling foreign-types-shared v0.1.1 Compiling base64 v0.22.1 Compiling foreign-types v0.3.2 Compiling ahash v0.8.12 Compiling rustls-pki-types v1.12.0 Compiling http-body v1.0.1 Compiling rand_chacha v0.3.1 Compiling zstd-sys v2.0.15+zstd.1.5.7 Compiling openssl-probe v0.1.6 Compiling hmac v0.12.1 Compiling rand v0.8.5 Compiling crossbeam-utils v0.8.21 Compiling atomic-waker v1.1.2 Compiling rustls v0.23.31 Compiling ipnet v2.11.0 Compiling byteorder v1.5.0 Compiling spin v0.9.8 Compiling base64 v0.21.7 Compiling spki v0.7.3 Compiling num-bigint v0.4.6 Compiling pkcs8 v0.10.2 Compiling mime v0.3.17 Compiling winnow v0.7.12 Compiling crc32fast v1.5.0 Compiling ref-cast v1.0.24 Compiling synstructure v0.13.2 Compiling darling_core v0.20.11 Compiling native-tls v0.2.14 Compiling iana-time-zone v0.1.63 Compiling alloc-no-stdlib v2.0.4 Compiling zstd-safe v7.2.4 Compiling alloc-stdlib v0.2.2 Compiling hashbrown v0.14.5 Compiling encoding_rs v0.8.35 Compiling adler2 v2.0.1 Compiling data-encoding v2.9.0 Compiling either v1.15.0 Compiling minimal-lexical v0.2.1 Compiling nom v7.1.3 Compiling miniz_oxide v0.8.9 Compiling brotli-decompressor v5.0.0 Compiling serde_derive v1.0.219 Compiling zerofrom-derive v0.1.6 Compiling displaydoc v0.2.5 Compiling yoke-derive v0.8.0 Compiling tokio-macros v2.5.0 Compiling zerovec-derive v0.11.1 Compiling futures-macro v0.3.31 Compiling tracing-attributes v0.1.30 Compiling darling_macro v0.20.11 Compiling zerofrom v0.1.6 Compiling tokio v1.47.1 Compiling yoke v0.8.0 Compiling thiserror-impl v1.0.69 Compiling zerotrie v0.2.2 Compiling futures-util v0.3.31 Compiling darling v0.20.11 Compiling thiserror-impl v2.0.12 Compiling openssl-macros v0.1.1 Compiling zerovec v0.11.4 Compiling pear_codegen v0.2.9 Compiling ref-cast-impl v1.0.24 Compiling tracing v0.1.41 Compiling rustls-native-certs v0.8.1 Compiling signature v2.2.0 Compiling ff v0.13.1 Compiling sync_wrapper v1.0.2 Compiling tinystr v0.8.1 Compiling potential_utf v0.1.2 Compiling psl-types v2.0.11 Compiling icu_collections v2.0.0 Compiling pastey v0.1.0 Compiling icu_locale_core v2.0.0 Compiling base16ct v0.2.0 Compiling tower-layer v0.3.3 Compiling heck v0.5.0 Compiling litrs v0.4.2 Compiling sec1 v0.7.3 Compiling icu_provider v2.0.0 Compiling document-features v0.2.11 Compiling http v0.2.12 Compiling icu_normalizer v2.0.0 Compiling icu_properties v2.0.1 Compiling futures-executor v0.3.31 Compiling futures v0.3.31 Compiling group v0.13.0 Compiling flate2 v1.1.2 Compiling rusticata-macros v4.1.0 Compiling brotli v8.0.1 Compiling async-trait v0.1.88 Compiling asn1-rs-derive v0.5.1 Compiling asn1-rs-impl v0.2.0 Compiling idna_adapter v1.2.1 Compiling idna v1.0.3 Compiling lazy_static v1.5.0 Compiling indexmap v2.10.0 Compiling url v2.5.4 Compiling chrono v0.4.41 Compiling uuid v1.17.0 Compiling tokio-util v0.7.16 Compiling tower v0.5.2 Compiling tokio-native-tls v0.3.1 Compiling publicsuffix v2.3.0 Compiling hkdf v0.12.4 Compiling webpki-roots v1.0.2 Compiling http-body-util v0.1.3 Compiling sha2 v0.10.9 Compiling rand_core v0.9.3 Compiling crypto-bigint v0.5.5 Compiling h2 v0.4.12 Compiling is-terminal v0.4.16 Compiling uncased v0.9.10 Compiling iri-string v0.7.8 Compiling siphasher v1.0.1 Compiling rustls v0.21.12 Compiling rustix v1.0.8 Compiling fastrand v2.3.0 Compiling devise_core v0.4.2 Compiling rand_chacha v0.9.0 Compiling elliptic-curve v0.13.8 Compiling cookie_store v0.21.1 Compiling rustls-webpki v0.103.4 Compiling rustls-webpki v0.101.7 Compiling sct v0.7.1 Compiling asn1-rs v0.6.2 Compiling serde_urlencoded v0.7.1 Compiling tower-http v0.6.6 Compiling serde_spanned v0.6.9 Compiling toml_datetime v0.6.11 Compiling http-body v0.4.6 Compiling rustc_version v0.4.1 Compiling sha1 v0.10.6 Compiling psm v0.1.26 Compiling libsqlite3-sys v0.35.0 Compiling socket2 v0.5.10 Compiling httpdate v1.0.3 Compiling linux-raw-sys v0.9.4 Compiling toml_write v0.1.2 Compiling inlinable_string v0.1.15 Compiling oid-registry v0.7.1 Compiling ucd-trie v0.1.7 Compiling hyper v1.6.0 Compiling unicode-xid v0.2.6 Compiling hyper v0.14.32 Compiling pear v0.2.9 Compiling pest v2.8.1 Compiling phf_shared v0.11.3 Compiling toml_parser v1.0.2 Compiling toml_edit v0.22.27 Compiling hyper-util v0.1.16 Compiling base64urlsafedata v0.5.2 Compiling curve25519-dalek v4.1.3 Compiling devise_codegen v0.4.2 Compiling rand v0.9.2 Compiling tokio-rustls v0.26.2 Compiling toml_datetime v0.7.0 Compiling serde_spanned v1.0.0 Compiling stable-pattern v0.1.0 Compiling rfc6979 v0.4.0 Compiling mysqlclient-sys v0.4.7 Compiling stacker v0.1.21 Compiling num_cpus v1.17.0 Compiling bigdecimal v0.4.8 Compiling hyper-rustls v0.27.7 Compiling hyper-tls v0.6.0 Compiling figment v0.10.19 Compiling multer v3.1.0 Compiling signal-hook v0.3.18 Compiling pq-sys v0.7.2 Compiling webauthn-attestation-ca v0.5.2 Compiling toml_writer v1.0.2 Compiling paste v1.0.15 Compiling state v0.6.0 Compiling num-bigint-dig v0.8.4 Compiling toml v0.9.5 error: failed to run custom build command for `webauthn-attestation-ca v0.5.2` Caused by: process didn't exit successfully: `/root/vaultwarden/target/release/build/webauthn-attestation-ca-efe966c80d1e94b4/build-script-build` (exit status: 101) --- stdout Your version of OpenSSL is out of date, and not supported by this library. Please upgrade to OpenSSL v3.0.0 or later. More info: https://github.com/kanidm/webauthn-rs/blob/master/OpenSSL.md OpenSSL version string: 269488511 --- stderr thread 'main' panicked at /root/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/webauthn-attestation-ca-0.5.2/build.rs:24:13: The installed version of OpenSSL is unusable. note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace warning: build failed, waiting for other jobs to finish... [ERROR] in line 53: exit code 0: while executing command $STD cargo build --features "sqlite,mysql,postgresql" --release
No response
I initially wrote an issue on the GitHub Repo of the community script (https://github.com/community-scripts/ProxmoxVE/issues/6821).
No dependencies set.
The note is not visible to the blocked user.
Originally created by @Moritz921 on GitHub (Aug 14, 2025).
Prerequisites
Vaultwarden Support String
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: ADMIN_TOKEN
Failed HTTP Checks:
Config:
Vaultwarden Build Version
1.34.1-ce70cd2c
Deployment method
Other method
Custom deployment method
I installed it via the Proxmox Community Script (https://community-scripts.github.io/ProxmoxVE/scripts?id=vaultwarden), which in turn installs it with building from source and deploying with systemd.
I have installed
1.1.1w-0+deb11u31.7.4~git20210206+dcf529b-31.1.1w-0+deb11u3Reverse Proxy
nginx 1.28.0
Host/Server Operating System
Linux
Operating System Version
Debian 11
Clients
Web Vault
Client Version
v2025.7.0
Steps To Reproduce
or
cargo build --features "sqlite,mysql,postgresql" --releaseExpected Result
Build the binary without an issue.
Actual Result
Raised an error while installing rustfmt because of outdated openssl version for webauthn-attestation-ca.
Logs
Screenshots or Videos
No response
Additional Context
I initially wrote an issue on the GitHub Repo of the community script (https://github.com/community-scripts/ProxmoxVE/issues/6821).