I have selfhosted it before, vaultwarden docker, with traefik and authelia for secure external access.
In the end I have gone for the family subscription as it is such a core service I wanted to remove the faff.
It worked fine for me, and also external access, but I never got it working...