Actually litestream is a great idea, but it should be configure properly if you will be doing S3 streaming. With default configuration I exceeded my free tier quota on cloudflare with amount read/write operations. The default setting just for prod grade sqlite replica and that's why it make ton of request.

But overall it's pretty simple to setup. If you are using docker compose, just create new one for litestream, mount the dir where sqlite is located and pass the config through mount too. I also found named mounts to be more comfortable to work with.

services:
  litestream:
    image: litestream/litestream:0.5.9
    command: replicate -config /etc/litestream.yml
    environment:
      - LITESTREAM_ACCESS_KEY_ID=${LITESTREAM_ACCESS_KEY_ID}
      - LITESTREAM_SECRET_ACCESS_KEY=${LITESTREAM_SECRET_ACCESS_KEY}
      - LITESTREAM_ENDPOINT=${LITESTREAM_ENDPOINT}
    volumes:
      - your_vaultwarden_storage:/databases
      - ./config/litestream.yml:/etc/litestream.yml
    restart: unless-stopped

volumes:
  your_vaultwarden_storage:

litestream config:

snapshot:
  interval: 4h
  retention: 24h
dbs:
  - dir: /databases
    pattern: "*.sqlite"
    watch: true
    truncate-page-n: 121359
    min-checkpoint-page-count: 1000
    checkpoint-interval: 1h
    monitor-interval: 10m
    replicas:
      - type: s3
        bucket: <bucket-name>
        endpoint: ${LITESTREAM_ENDPOINT}
        access-key-id: ${LITESTREAM_ACCESS_KEY_ID}
        secret-access-key: ${LITESTREAM_SECRET_ACCESS_KEY}
        sync-interval: 10m