Team Password Manager is a secure self-hosted password manager built for teams and businesses. It lets you safely store, organize and share passwords with full data control on your own servers using AES-256 encryption, 2FA granular permissions, project folders, browser extensions for autofill and a full REST API. In this step by step guide I will show you how to install Team Password Manager on your Synology NAS using Docker and Portainer.

💡Note: This guide works perfectly with the latest Team Password Manager v14.177.303_2 release.

• STEP 1

Please Support My work by Making a Donation.

• STEP 2

Install Portainer using my step by step guide. If you already have Portainer installed on your Synology NAS, skip this STEP. Attention: Make sure you have installed the latest Portainer version.

• STEP 3

Make sure you have a synology.me Wildcard Certificate. Follow my guide to get a Wildcard Certificate. If you already have a synology.me Wildcard certificate, skip this STEP.

• STEP 4

Go to Control Panel / Login Portal / Advanced Tab / click Reverse Proxy. Follow the instructions in the image below.

• STEP 5

Now click the “Create” button. Follow the instructions in the image below.

• STEP 6

After you click the Create button, the window below will open. Follow the instructions in the image below.

On the General area, set the Reverse Proxy Name description: type in TPM. After that, add the following instructions:

Source:
Protocol: HTTPS
Hostname: tpm.yourname.synology.me
Port: 443

Check Enable HSTS

Destination:
Protocol: HTTP
Hostname: localhost
Port: 26480

• STEP 7

On the Reverse Proxy Rules, click the Custom Header tab. Click Create and then, from the drop-down menu, click WebSocket. After you click on WebSocket, two Header Names and two Values will be automatically added. Click Save. Follow the instructions in the image below.

• STEP 8

On the Reverse Proxy Rules, click the Advanced Settings tab.

1. Increase the Proxy connection timeout from 60 to 600 seconds.
2. Increase the Proxy send timeout from 60 to 600 seconds.
3. Increase the Proxy read timeout from 60 to 600 seconds.

Click Save to save the settings.

• STEP 9

Go to Control Panel / Network / Connectivity tab/ Check Enable HTTP/2 then click Apply. Follow the instructions in the image below.

• STEP 10

Go to Control Panel / Security / Advanced tab/ Check Enable HTTP Compression then click Apply. Follow the instructions in the image below.

• STEP 11

Go to File Station and open the docker folder. Inside the docker folder, create one new folder and name it tpm. Follow the instructions in the image below.
Note: Be careful to enter only lowercase, not uppercase letters.

• STEP 12

Now create two new folders inside the tpm folder that you created at STEP 11 and name them data and db. Follow the instructions in the image below.
Note: Be careful to enter only lowercase, not uppercase letters.

• STEP 13

Log into Portainer using your username and password. On the left sidebar in Portainer, click on Home then Live connect. Follow the instructions in the image below.

On the left sidebar in Portainer, click on Stacks then + Add stack. Follow the instructions in the image below.

• STEP 14

In the Name field type in tpm. Follow the instructions in the image below.

Note: Copy Paste the code below in the Portainer Stacks Web editor.

services:
  mysql:
    image: mariadb:11.8-noble #LTS Long Term Support Until October 15, 2033.
    container_name: TPM-DB
    security_opt:
      - no-new-privileges:true
    hostname: mysql
    environment:
      MYSQL_DATABASE: tpm_database
      MYSQL_USER: tpm_user
      MYSQL_PASSWORD: tpm_password
      MYSQL_ROOT_PASSWORD: rootpass
      TZ: Europe/Bucharest
    volumes:
      - /volume1/docker/tpm/db:/var/lib/mysql:rw
    restart: on-failure:5

  teampasswordmanager:
    image: teampasswordmanager/teampasswordmanager:latest
    container_name: TPM
    healthcheck:
      test: timeout 10s bash -c ':> /dev/tcp/127.0.0.1/80' || exit 1
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 90s
    ports:
      - 26480:80
    volumes:
      - /volume1/docker/tpm/data:/var/www/html:rw
    environment:
       TPM_SERVER_TIMEZONE: Europe/Bucharest
       TPM_PHP_TIMEZONE: Europe/Bucharest
       TPM_ENCRYPT_DB_CONFIG: 0
       TPM_CONFIG_HOSTNAME: mysql
       TPM_CONFIG_PORT: 3306
       TPM_CONFIG_USERNAME: tpm_user
       TPM_CONFIG_PASSWORD: tpm_password
       TPM_CONFIG_DATABASE: tpm_database
       TPM_UPGRADE: 0
    depends_on:
      - mysql
    restart: on-failure:5

Note: Before you paste the code above in the Web editor area below, change the values for TZ, TPM_SERVER_TIMEZONE, TPM_PHP_TIMEZONE. (Select your current Time Zone from this list.)

• STEP 15

Scroll down on the page until you see a button named Deploy the stack. Click on it. Follow the instructions in the image below. The installation process can take up to a few minutes. It will depend on your Internet speed connection.

• STEP 16

If everything goes right, you will see the following message at the top right of your screen: “Success Stack successfully deployed“.

• STEP 17

🟢Please Support My work by Making a Donation. Almost 99,9% of the people that install something using my guides forget to support my work, or just ignore STEP 1. I’ve been very honest about this aspect of my work since the beginning: I don’t run any ADS, I don’t require subscriptions, paid or otherwise, I don’t collect IPs, emails, and I don’t have any referral links from Amazon or other merchants. I also don’t have any POP-UPs or COOKIES. I have repeatedly been told over the years how much I have contributed to the community. It’s something I love doing and have been honest about my passion since the beginning. But I also Need The Community to Support me Back to be able to continue doing this work.

• STEP 18

Now open your browser and type in your HTTPS/SSL certificate like this https://tpm.yourname.synology.me/index.php/install In my case, it’s https://tpm.mariushosting.synology.me/index.php/install If everything goes right, you will see the Team Password Manager installation page. Type in your own details, then click Submit data to complete installation. Follow the instructions in the image below.

⚠️Warning: After your own DDNS or domain name, remember to add /index.php/install in the browser.
⚠️Warning: This container works only with your own DDNS or own domain name. You will get an error if you try to install it on localhost.

• STEP 19

Click Team Password Manager Sign In. Follow the instructions in the image below.

• STEP 20

Type in your own Username and Password that you have previously added at STEP 18. Click Sign In. Follow the instructions in the image below.

• STEP 21

Your Team Password Manager dashboard at a glance!

Enjoy Team Password Manager!

🆘TROUBLESHOOTING

Note: Can I run Docker on my Synology NAS? See the supported models.
Note: How to Back Up Docker Containers on your Synology NAS.
Note: Find out how to update the Team Password Manager container with the latest image.
Note: How to Free Disk Space on Your NAS if You Run Docker.
Note: Instead of the synology.me DDNS you can also use your own domain name.
Note: How to Schedule Start & Stop For Docker Containers.
Note: How to Activate Email Notifications.
Note: How to Add Access Control Profile on Your NAS.
Note: How to Change Docker Containers Restart Policy.
Note: How to Use Docker Containers With VPN.
Note: Convert Docker Run Into Docker Compose.
Note: How to Clean Docker.
Note: How to Clean Docker Automatically.
Note: Best Practices When Using Docker and DDNS.
Note: Some Docker Containers Need WebSocket.
Note: Find out the Best NAS Models For Docker.
Note: Activate Gmail SMTP For Docker Containers.