From c27d479a3a189ff1d5024e6567aeb47daa0fe367 Mon Sep 17 00:00:00 2001
From: GrayRice <155818488+Gray-Rice@users.noreply.github.com>
Date: Sun, 17 May 2026 14:19:09 +0530
Subject: [PATCH 1/2] Update Vaultwarden/Bitwarden Bypass rules
---
self-host/community-guides/rules.mdx | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/self-host/community-guides/rules.mdx b/self-host/community-guides/rules.mdx
index 4cb0240..5de27cc 100644
--- a/self-host/community-guides/rules.mdx
+++ b/self-host/community-guides/rules.mdx
@@ -29,7 +29,7 @@ This table compiles paths that need to be allowed for various apps to work with
| **Security & Privacy** | |
| AdGuard Home | `/api/*` |
| Ente Auth | `*api*` |
-| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
Always Deny - Path - `/admin/*` |
+| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
`/notifications/hub` required for websocket notifications enabled by default since v1.29.0 of Vaultwarden
Always Deny - Path - `/admin/*` |
| **Cloud & Sync** | |
| Nextcloud | `/` (Main interface)
`/index.php` (Core handler)
`/remote.php` (Remote access)
`/status.php` (Status checks)
`/ocs` (Collaboration Services API)
`/apps` (Applications)
`/remote.php/webdav` (WebDAV endpoint)
`/remote.php/dav` (CalDAV/CardDAV)
`/remote.php/caldav` (Calendar sync)
`/remote.php/carddav` (Contacts sync)
`/ocs/v1.php` (API endpoints)
`/ocs/v2.php` (API v2 endpoints)
`/login` (Authentication)
`/.well-known/*` (Service discovery)
`/.well-known/webfinger` (WebFinger protocol)
`/s/*` (Shared files/folders) |
| Onlyoffice | `/cache/*`
`*/CommandService.ashx`
`*/converter/*`
`*/doc/*`
`*/downloadas/*`
`/downloadfile/*`
`*/fonts/*`
`/healthcheck`
`/methodology/*`
`*/plugins.json`
`*/sdkjs/*`
`*/sdkjs-plugins/*`
`*/themes.json`
`*/web-apps/*` |
From 73d558d4f530443a872777c1dfba16b6b6d9e411 Mon Sep 17 00:00:00 2001
From: GrayRice <155818488+Gray-Rice@users.noreply.github.com>
Date: Sun, 17 May 2026 14:31:01 +0530
Subject: [PATCH 2/2] Update rules.mdx
---
self-host/community-guides/rules.mdx | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/self-host/community-guides/rules.mdx b/self-host/community-guides/rules.mdx
index 5de27cc..cf79471 100644
--- a/self-host/community-guides/rules.mdx
+++ b/self-host/community-guides/rules.mdx
@@ -29,7 +29,7 @@ This table compiles paths that need to be allowed for various apps to work with
| **Security & Privacy** | |
| AdGuard Home | `/api/*` |
| Ente Auth | `*api*` |
-| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
`/notifications/hub` required for websocket notifications enabled by default since v1.29.0 of Vaultwarden
Always Deny - Path - `/admin/*` |
+| Vaultwarden/Bitwarden | `/api/*`
`/identity/*`
`/wl/*`
`/notifications/hub` required for websocket notifications enabled by default since v1.29.0 of Vaultwarden
`/icons/*` For proper loading of Favicons (Optional)
Always Deny - Path - `/admin/*` |
| **Cloud & Sync** | |
| Nextcloud | `/` (Main interface)
`/index.php` (Core handler)
`/remote.php` (Remote access)
`/status.php` (Status checks)
`/ocs` (Collaboration Services API)
`/apps` (Applications)
`/remote.php/webdav` (WebDAV endpoint)
`/remote.php/dav` (CalDAV/CardDAV)
`/remote.php/caldav` (Calendar sync)
`/remote.php/carddav` (Contacts sync)
`/ocs/v1.php` (API endpoints)
`/ocs/v2.php` (API v2 endpoints)
`/login` (Authentication)
`/.well-known/*` (Service discovery)
`/.well-known/webfinger` (WebFinger protocol)
`/s/*` (Shared files/folders) |
| Onlyoffice | `/cache/*`
`*/CommandService.ashx`
`*/converter/*`
`*/doc/*`
`*/downloadas/*`
`/downloadfile/*`
`*/fonts/*`
`/healthcheck`
`/methodology/*`
`*/plugins.json`
`*/sdkjs/*`
`*/sdkjs-plugins/*`
`*/themes.json`
`*/web-apps/*` |