Vaultwarden + Traefik getting 403 Forbidden

Traefik Traefik v2
1

Hello there,
I've been struggling to setup vaultwarden with traefik proxy.
I have some endpoints like /api/config and /api/devices/knowndevice, which returns 403 Forbidden when behind the proxy.
I've tried with various traefik settings but nothing worked, and I have no idea whats blocking those endpoints. Ultimately I think these are the reasons my session expires after login.
My current configs:

"traefik.enable=true"
"traefik.docker.network=traefik_proxy_default"
"traefik.http.routers.pwd.rule=Host(vw.domain.tld)"
"traefik.http.routers.pwd.tls=true"

2

Enable Traefik access log in JSON format to see if the response comes from Traefik itself or the target service.

That shows the status differentiated into OriginStatus (from target) and DownstreamStatus (from Traefik).

You might also add the port in labels, in case the service/containers exposes (declares) multiple. Check simple Traefik example.