Docker BitWarden - self hosted password manager using vaultwarden/server image

[akahan]

My reverse proxy is on a different diskstation. In other words: I have a diskstation that is web facing, and it reverse proxies bitwarden to a DIFFERENT diskstation, which bitwarden resides on.

 

[Rusty]

Well no matter... Make the changes where your reverse proxy is for BW is hosted.

 

[wwwampy]

New release (version 1.10.0):

Release 1.10.0 · dani-garcia/vaultwarden

This is a big one! Important note: If you are using the old mprasil/bitwarden image, you need to migrate to the newer bitwardenrs/server to access the new releases, the images are compatible so you...

github.com

I've updated my container. Works fine.

 

[akahan]

I have attempted to update my container; how can I tell if I've succeeded? (It still says "Version 2.11.0").

 

[wwwampy]

That's the latest version, updated 5 days ago.

 

[Rusty]

I have attempted to update my container; how can I tell if I've succeeded? (It still says "Version 2.11.0").

That’s the web ui part. 1.10 version is the bw itself (it’s engine)

 

[akahan]

Great, so how do I determine if I have the latest engine installed?

 

[Rusty]

check the resource section and have a look how to get admin access to your bw. there you can see all the users, settings and version as well

 

[akahan]

Thanks; accomplished.

 

[iStone]

this sounds promising what I need to share browser password across macOS vs. WinX.
But allow me these simple or stupid question of its methodology:
- Does it means synchronize certain folder of e.g. Firefox?
- Do I always go that website and download the folder/file?
- Is it possible to interpret the password file(e.g. JSON) and merge/insert to the database?

thanks for your insights.

 

[akahan]

No, you don't synchronize a folder of Firefox, or any other browser. The Bitwarden server holds its own file containing the login/password data, and the information is sync'd across all your devices that are using Bitwarden.
You don't download anything from any website. Bitwarden synchronizes itself.
You can import a JSON file; I'm not sure how good a job it does of that, though.
You might have to go in manually and fix some things.

 

[Telos]

But allow me these simple or stupid question of its methodology:

Install the Bitwarden app extension on each browser. You'll need to tell the extension the path to your Bitwarden package... i.e.
https://secretword.synology.me:port

 

[iStone]

Thanks @akahan @Telos

Pity this may beyond my current need.
I use macOs and WinX often, but set/change diverse passwords via e.g. Firefox. My basic need is to synchronize the pwd database up-to-date and merged. I thought a python script and my own addon in FF would probably be perfect, just don't have the time to this...

Bitwarden seems more powerful exceed my need and introduces also completeness and complicity. PS: I always would like to keep lean and clean, not quite willingly to add another docker container into my SynoNAS burden that pony too much

 

[Rusty]

Thanks @akahan @Telos

Pity this may beyond my current need.
I use macOs and WinX often, but set/change diverse passwords via e.g. Firefox. My basic need is to synchronize the pwd database up-to-date and merged. I thought a python script and my own addon in FF would probably be perfect, just don't have the time to this...

Bitwarden seems more powerful exceed my need and introduces also completeness and complicity. PS: I always would like to keep lean and clean, not quite willingly to add another docker container into my SynoNAS burden that pony too much

Well I didn't want to comment on your initial quesiton considering that @akahan and @Telos covered it all, but just want to say that burden and BW don't come together.

This picture represents CPU (top) and RAM (bottom) usage for BW container. As you can see its super light. BW can import a great deal of formats and it would be, imho, a far better solution then any other addon/browser service out there.

 

[BobW]

This is how I setup Bitwarden-mysql:
(Don't forget to first create your database and database-user in Mariadb)

docker pull bitwardenrs/server-mysql:latest
docker stop bitwarden-mysql
docker rm bitwarden-mysql
docker run -d \
 --name bitwarden-mysql \
 -v /volume1/docker/bitwarden/data/:/data/ \    #change to your path
 -v /volume1/docker/ssl:/ssl/ \     #change to your path
 -v /etc/localtime:/etc/localtime:ro \
 -v /etc/TZ:/etc/timezone:ro \
 -p 44300:80 -p 3012:3012 \
 --env TZ='<yourtimezone>' \
 --env DATABASE_URL='mysql://bitwarden:<yourdbpassword>@mysql/bitwarden' \
 --env ROCKET_TLS='{certs="/ssl/cert.pem",key="/ssl/privkey.pem"}' \
 --env ENABLE_DB_WAL='false' \
 --env RUST_BACKTRACE='1' \
 --link mariadb:mysql \
 --restart='unless-stopped' bitwardenrs/server-mysql:latest

 

[Gibrus]

Hi all, thanks for the great tutorial and for this thread, very useful. I've installed BitWarden on docker in a DS412+ and it just works. I can access to the server via local ip address, but I can't access via external access (iOS app and similar).
Local port, connected to 80 port, is 32775. So if I browse to "http://localhost:32775" I see the BitWarden server, and I want to access it also via app using the Synology DDNS URL. I've configured the xxx.synology.me url, and the reverse proxy rule:

SOURCE
Protocol: HTTPS
Hostname: xxx.synology.me
Port: 443

DESTINATION
Protocol: HTTP
Hostname: locahost
Port: 32775

The 443 port is reachable from internet, because I've a rule in the "Router configuration", "External access" of the Synology Control panel for HTTPS Reverse Proxy that match 443 localport and 443 router port.

I go in the BitWarden iPhone app and I try to connect to "https://xxx.synology.me:443", but I always receive an errore message.

What make it wrong? In the Synology I've other services, like Calendar, WebDAV server, CarDAV server, and I connect to them without problems.

Thanks in advance

 

[akahan]

Try removing the https:// and the :443 from the address in the IOS application.

[AMENDMENT: This post is stupid advice, because I misread the question. Apologies.]

 

[Gibrus]

Try removing the https:// and the :443 from the address in the IOS application.

I always receive an error message. It seems something related to the Apple ecosystem. BitWarden for iOS (iPhone and iPad) and Mac doesn't work, but no problem in a Windows pc. I can reach BitWarden vault via browser and browser extension.

If I set, in the BitWarden iOS app configuration panel, "xxx.synology.me", I receive and errore message and the url it is changed in the "https://xxx.synology.me".

 

[akahan]

OH, sorry, I didn't read closely enough. You don't mention whether you have the router port forwarding port 443 to the LAN address of the Synology. Do you? Also, you'd need an SSL certificate on the synology for the subdomain xxx.synology.com . Do you have that installed?

 

[Rusty]

@Gibrus what exact error do you get?