Vaultwarden

May 15, 2022 - 23:01:30 — CaylakPenguen

The Most Trusted Open Source Password Manager for Business

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

Alternative implementation of the Bitwarden server API written in Rust and compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal..

Github: https://github.com/dani-garcia/vaultwarden/

⭐ Features

Basically full implementation of Bitwarden API is provided including:

Organizations support
Attachments
Vault API support
Serving the static files for Vault interface
Website icons API
Authenticator and U2F support
YubiKey and Duo support

Check out Demo 😋

Try out (With limited functionalities) https://bitwarden.com/

Installation

Browse to the root directory
Create a folder "vaultwarden"
Browse into the folder
Create a docker-compose file using nano docker-compose.yml
Paste the content below
Save the docker file
Exit out the docker file
Run docker-compose up -d

Vaultwarden-installation.preview

version: '3'
services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      - WEBSOCKET_ENABLED=true  # Enable WebSocket notifications.
    volumes:
      - ./vw-data:/data
    ports:
      - 9884:80
      - 9885:443

Make sure docker container is running vaultwarden-docker.ps

Before running Vaultwarden

In order for Vaultwarden to work, first you need to enable HTTPS on the vaultwarden service

Setting up a Reverse Proxy and point to a domain

Install and configure Nginx proxy manager as explained "here"
Login to Nginx proxy manager
Go to Hosts > Proxy Hosts
Click on Add proxy Host

Fill it as seen below

Replace "service.yourdomain.tld" with your prefered subdomain followed by your domain url
Type your servers ip in forward hostname box
Forward the port, 9884 (as in the docker config)
Choose Cache Assets, Block Common Exploits and Websockets support

Now go to SSL Tab

Under SSL certificate, choose "Request a new SSL Cert" from the dropdown menu
Enable Force SSL
Fill in your email address
Click on I agree to T.O.S
Click save

Setting up SSL

After a while, you site should be live on filebrowser.yourdomain.tld no need to type serverip:9884 from now on and plus it has SSL now.

Bitwarden SSL active

Setting up Bitwarden

vaultwarden-welcome.scr Now the installation has been finished, so let's proceed witht the setup. 1. Click on "Create Account" 2. Create a account like you normally would vault-warden.signup 3. Login and you shall then see... vaultwarde-welcome.scr 4. Creating first Login credential vaultwarden-add.scr 5. Add the browser extension vaultwarden-ext.inst 6. Login to the extension vaultwarden-ext.login 7. Using the extension vaultwarden-ext.use