> Using something like vaultwarden? I'm curious how do you keep it secure from intrusion? I'm looking to do the same

The official bitwarden self hosted setup works flawlessly. Hosting it at home and access it through tailscale.