vaultwarden

Lightweight self-hosted version of Bitwarden

Go to file

Daniel García 5352321fe1 Merge pull request #831 from mprasil/whitelist-fix SIGNUPS_ALLOWED with no whitelist [fixes #830]		5 years ago
.github	Delete old workflow file and disable building binaries on pull requests, as we already have CI for that	5 years ago
docker	Update u2f to 0.2, which requires OpenSSL but also might solve the problems we've had with certificates.	5 years ago
migrations	Implement change-email, email-verification, account-recovery, and welcome notifications	5 years ago
src	SIGNUPS_ALLOWED with no whitelist [fixes #830 ]	5 years ago
.dockerignore	Include git repo in build so we get version	6 years ago
.env.template	Config option for client IP header	5 years ago
.gitignore	Rename included .env file to .env.template and ignored .env	6 years ago
.hadolint.yaml	add hadolint config file	5 years ago
.travis.yml	Change CI to run tests	5 years ago
Cargo.lock	Update handlebars to 3.0 which included performance improvements.	5 years ago
Cargo.toml	Update handlebars to 3.0 which included performance improvements.	5 years ago
Dockerfile	Symlink amd64 Dockerfile to repo root	6 years ago
LICENSE.txt	Upload and download attachments, and added License file	7 years ago
README.md	Add contributor	5 years ago
Rocket.toml	Document configuration a bit and increase JSON size limit to 10MB	7 years ago
azure-pipelines.yml	Change CI to run tests	5 years ago
build.rs	Adds support for PostgreSQL which resolves #87 and is mentioned in #246 .	5 years ago
diesel.toml	Updated dependencies and created 'rust-toolchain', to mark a working nightly to rustup users, and hopefully avoid some nightly breakage.	7 years ago
rust-toolchain	Update docker images to alpine 3.11 and rust 1.40	5 years ago
rustfmt.toml	Formatting	5 years ago

README.md

This is a Bitwarden server API implementation written in Rust compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal.

Image is based on Rust implementation of Bitwarden API.

This project is not associated with the Bitwarden project nor 8bit Solutions LLC.

Features

Basically full implementation of Bitwarden API is provided including:

Basic single user functionality
Organizations support
Attachments
Vault API support
Serving the static files for Vault interface
Website icons API
Authenticator and U2F support
YubiKey OTP

Installation

Pull the docker image and mount a volume from the host for persistent storage:

docker pull bitwardenrs/server:latest
docker run -d --name bitwarden -v /bw-data/:/data/ -p 80:80 bitwardenrs/server:latest

This will preserve any persistent data under /bw-data/, you can adapt the path to whatever suits you.

IMPORTANT: Some web browsers, like Chrome, disallow the use of Web Crypto APIs in insecure contexts. In this case, you might get an error like Cannot read property 'importKey'. To solve this problem, you need to access the web vault from HTTPS.

This can be configured in bitwarden_rs directly or using a third-party reverse proxy (some examples).

If you have an available domain name, you can get HTTPS certificates with Let's Encrypt, or you can generate self-signed certificates with utilities like mkcert. Some proxies automatically do this step, like Caddy (see examples linked above).

Usage

See the bitwarden_rs wiki for more information on how to configure and run the bitwarden_rs server.

Get in touch

To ask a question, raising an issue is fine. Please also report any bugs spotted here.

If you prefer to chat, we're usually hanging around at #bitwarden_rs:matrix.org room on Matrix. Feel free to join us!