vaultwarden

Lightweight self-hosted version of Bitwarden

Go to file

Jake Howard 4584cfe3c1 Additionally set expires header when caching responses Browsers are rather smart, but also dumb. This uses the `Expires` header alongside `cache-control` to better prompt the browser to actually cache. Unfortunately, firefox still tries to "race" its own cache, in an attempt to respond to requests faster, so still ends up making a bunch of requests which could have been cached. Doesn't appear there's any way around this.		3 years ago
.github	Optimize release workflow.	3 years ago
docker	Support all DB's for Alpine and Debian	3 years ago
hooks	Support all DB's for Alpine and Debian	3 years ago
migrations	Fix PostgreSQL migration	3 years ago
resources	Storing the original Vaultwarden svg images	3 years ago
src	Additionally set expires header when caching responses	3 years ago
tools	global_domains.py: allow syncing to a specific Git ref	4 years ago
.dockerignore	Misc changes.	4 years ago
.editorconfig	Misc changes.	4 years ago
.env.template	Better document the new rate limiting	3 years ago
.gitattributes	Just ignore scripts	4 years ago
.gitignore	Rename included .env file to .env.template and ignored .env	6 years ago
.hadolint.yaml	add hadolint config file	5 years ago
.pre-commit-config.yaml	Update some JS Libraries and fix small issues	3 years ago
Cargo.lock	Additionally set expires header when caching responses	3 years ago
Cargo.toml	Additionally set expires header when caching responses	3 years ago
Dockerfile	Change Dockerfiles to make the AMD image multidb	4 years ago
LICENSE.txt	Upload and download attachments, and added License file	7 years ago
README.md	Update README.md	3 years ago
Rocket.toml	Document configuration a bit and increase JSON size limit to 10MB	7 years ago
SECURITY.md	Adding a SECURITY.md	3 years ago
build.rs	Fix branch name	4 years ago
diesel.toml	Updated dependencies and created 'rust-toolchain', to mark a working nightly to rustup users, and hopefully avoid some nightly breakage.	7 years ago
rust-toolchain	Support all DB's for Alpine and Debian	3 years ago
rustfmt.toml	Modify rustfmt file	4 years ago

README.md

Alternative implementation of the Bitwarden server API written in Rust and compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal.

📢 Note: This project was known as Bitwarden_RS and has been renamed to separate itself from the official Bitwarden server in the hopes of avoiding confusion and trademark/branding issues. Please see #1642 for more explanation.

Image is based on Rust implementation of Bitwarden API.

This project is not associated with the Bitwarden project nor 8bit Solutions LLC.

⚠️IMPORTANT⚠️: When using this server, please report any bugs or suggestions to us directly (look at the bottom of this page for ways to get in touch), regardless of whatever clients you are using (mobile, desktop, browser...). DO NOT use the official support channels.

Features

Basically full implementation of Bitwarden API is provided including:

Organizations support
Attachments
Vault API support
Serving the static files for Vault interface
Website icons API
Authenticator and U2F support
YubiKey and Duo support

Installation

Pull the docker image and mount a volume from the host for persistent storage:

docker pull vaultwarden/server:latest
docker run -d --name vaultwarden -v /vw-data/:/data/ -p 80:80 vaultwarden/server:latest

This will preserve any persistent data under /vw-data/, you can adapt the path to whatever suits you.

IMPORTANT: Some web browsers, like Chrome, disallow the use of Web Crypto APIs in insecure contexts. In this case, you might get an error like Cannot read property 'importKey'. To solve this problem, you need to access the web vault from HTTPS.

This can be configured in vaultwarden directly or using a third-party reverse proxy (some examples).

If you have an available domain name, you can get HTTPS certificates with Let's Encrypt, or you can generate self-signed certificates with utilities like mkcert. Some proxies automatically do this step, like Caddy (see examples linked above).

Usage

See the vaultwarden wiki for more information on how to configure and run the vaultwarden server.

Get in touch

To ask a question, offer suggestions or new features or to get help configuring or installing the software, please use the forum.

If you spot any bugs or crashes with vaultwarden itself, please create an issue. Make sure there aren't any similar issues open, though!

If you prefer to chat, we're usually hanging around at #vaultwarden:matrix.org room on Matrix. Feel free to join us!