slock83
Also, after your device synced with the server at least once, you can still access and export all your passwords, even if the server is down. This is the main selling point for me : even in a disaster scenario, your passwords are "naturally" replicated.
Mine is exposed behind a reverse proxy, with a subdomain != Bitwarden, and a wildcard certificate. Never seen anything weird in the logs since (before, I had a named certificate including subdomain, and I was seeing regular pokes from unknown IPs, so better be on the safe side)
Again, the main bitwarden instance is a huge target. Mine is just a small instance with less than 10 users, which will probably never encounter a targeted attack.
As for the dataset, while I don't know for certain in this particular case, we have a rather accurate database of constructions in France, that could have been used (it's publicly accessible, actually that's what OpenStreetMaps used for the building footprints here), and include pools. We also have "BDOrtho", a public database of aerial photography.
These data can be seen at https://www.geoportail.gouv.fr/carte
I've not had a single issue with it since, it's fully compatible with the official bitwarden app (which works rather well), and is much easier to use when other people in your household also need to manage their passwords.
Point of note : the android app syncs the database locally, and can be accessed/used/exported even offline, which is very, very reassuring in case of server/network failure
It runs a full AdBlock, ip-ranges blocking, and a wireguard server (with good enough bandwidth, I use it with steam link/gamestream).
Very nice small router
Both are rather strict on having a clean, non rooted, non modified phone. Currently, they both work without any caveats, but I had to install magisk, add them to magisk hide, and use the magisk renaming feature to have them work.