diff --git a/Node1/Docker (100)/vaultwarden/compose.yaml b/Node1/Docker (100)/vaultwarden/compose.yaml
new file mode 100644
index 0000000..1f8d2fd
--- /dev/null
+++ b/Node1/Docker (100)/vaultwarden/compose.yaml	
@@ -0,0 +1,26 @@
+services:
+  vaultwarden:
+    image: vaultwarden/server:latest
+    container_name: vaultwarden
+    restart: unless-stopped
+    ports:
+      - "8081:80"
+    environment:
+      DOMAIN: ${DOMAIN}
+      TZ: "Europe/Berlin"
+      LOG_LEVEL: "warn"
+      LOG_FILE: "/data/vaultwarden.log"
+      WEBSOCKET_ENABLED: "true"
+      SIGNUPS_ALLOWED: "false"
+      SIGNUPS_VERIFY: "false"
+      # Admin-Panel — Argon2-Hash empfohlen:
+      # docker exec -it vaultwarden /vaultwarden hash --preset owasp
+      ADMIN_TOKEN: ${ADMIN_TOKEN}
+    volumes:
+      - ${DATA_ROOT}:/data
+    networks:
+      - vaultwarden_net
+
+networks:
+  vaultwarden_net:
+    driver: bridge
\ No newline at end of file
diff --git a/Node1/Docker (100)/vaultwarden/vaultwarden-README.md b/Node1/Docker (100)/vaultwarden/vaultwarden-README.md
new file mode 100644
index 0000000..aa01f76
--- /dev/null
+++ b/Node1/Docker (100)/vaultwarden/vaultwarden-README.md	
@@ -0,0 +1,34 @@
+# Vaultwarden
+
+## Info
+- **URL:** https://pass.mbraune.com
+- **Host:** Proxmox LXC (192.168.178.50)
+- **Interner Port:** 80
+- **Image:** vaultwarden/server:latest
+
+## Abhängigkeiten
+- `vaultwarden_net` (internes Docker-Netzwerk)
+- `proxy_net` (Pangolin/Newt)
+
+## Sicherheit
+- Registrierung deaktiviert
+- Admin-Token gehasht (Argon2)
+- Fail2Ban aktiv
+- 2FA aktiviert
+- Signups deaktiviert
+
+## Backup
+- Tägliches Backup via Cron-Job auf die Synology NAS
+- Backup-Pfad: NAS
+
+## Secrets
+- Admin-Token → Vaultwarden Secure Note
+- SMTP-Credentials (falls konfiguriert) → Vaultwarden Secure Note
+
+## Ports & Netzwerk
+- Extern erreichbar via Pangolin/Newt Tunnel
+- Kein direktes Port-Forwarding
+- Netzwerk: `vaultwarden_net`
+
+## Letzte Änderungen
+- 2026-08-05: README erstellt