I use KeePassXC. Broadly, the way this works is quite simple: I have my KeePassXC vault stored on a network share. This network share uses a simple password that only I have access to. The network share is not an encrypted share, and the disk is not encrypted. This means that if something crazy happens, I can still pull the vault offline and use it.

I backup the vault to a separate RAID array using restic, and use restic with a cloud storage provider for offline backups of this vault.

For remote access to my vault, I use a WireGuard VPN (but you could easily use Tailscale for this with far less effort) to get all of my devices on the same overlay network. On iOS, I use Strongbox to access my vault remotely.