tuhriel

Yep that would be a good alternative...I don't have an official domain for it, so I went the self-signed way

Which enables me to provide tls/https for all my local services. And it was a fun experience to learn

Jep I hate the, "you don't own anything anymore" mentality... There are some valid reasons to actually provide a subscription, but most of the times it should just be a one time payment

I once had a valid office key... But since I reset my computer to often the amount of "free activations" was used up... There where so many hoops to jump through to re-activate it that it was easier to get a cracked key to activate my office version... That's just sick

Not the one who wrote initially, but i have the same setup (mostly).
I went with a self signed certificate. So the server is running with a certificate i have signed with my own certification authority certificate (ca-cert) .
That means I have to install the ca-cert on all devices to get vaultwarden to accept it.

The alternative is a let's encrypt cerrtificate, which are free, but you need to open port 80 (and another one if I remember correctly) for it to work (at least every 3 months)

And even better: wireguard configs as well