Vaultwarden原为Bitwarden RS，由Rust编写，是Bitwarden服务API的替代实现，并与Bitwarden客户端相兼容，是一款开源的密码管理软件。
准备
提前安装Nginx。
安装Docker
1
| wget -qO- https://get.docker.com/ | sudo bash
|
安装Docker Compose
1
2
| sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose
|
启动Docker并设置开机启动
1
2
| sudo systemctl start docker
sudo systemctl enable docker
|
部署Vaultwarden
创建Vaultwarden的运行目录
1
| cd /opt && sudo mkdir vaultwarden && cd vaultwarden
|
创建docker-compose配置文件
1
| sudo vim /opt/vaultwarden/docker-compose.yml
|
文件配置：
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
| version: "3"
services:
vaultwarden:
image: vaultwarden/server:latest
container_name: vaultwarden
restart: always
ports:
- "8088:80"
volumes:
- ./vw-data:/data
environment:
#后台管理登陆密码
- ADMIN_TOKEN=admin_token
#域名配置
- DOMAIN=https://domain.name
#更改workers数量
- ROCKET_WORKERS=20
#更改API请求大小限制
- ROCKET_LIMITS={json=10485760}
#是否启用密码提示
- SHOW_PASSWORD_HINT=false
#是否启用注册，自用的话自己搭建好注册后改成false
- SIGNUPS_ALLOWED=false
#是否启用WebSocket通知
- WEBSOCKET_ENABLED=true
#是否启用Web客户端
- WEB_VAULT_ENABLED=true
#邮件配置
- SMTP_HOST=smtp.domain.name
- SMTP_FROM=no-reply@domain.name
- SMTP_PORT=587
- SMTP_SSL=true
- SMTP_USERNAME=no-reply@domain.name
- SMTP_PASSWORD=password
|
启动vaultwarden服务
1
2
| cd /opt/vaultwarden
sudo docker-compose up -d
|
运行后会自动拉去镜像和设置Vaultwarden。
关闭重启服务命令
1
2
| sudo docker-compose down
sudo docker-compose restart
|
Nginx反代
反向代理配置：
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
| upstream vaultwarden-default {
zone vaultwarden-default 64k;
server 127.0.0.1:8088;
keepalive 2;
}
map $http_upgrade $connection_upgrade {
default upgrade;
'' "";
}
server {
listen 80;
listen [::]:80;
server_name domain.name;
if ($host = domain.name) {
return 301 https://$host$request_uri;
}
return 404;
}
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name domain.name;
client_max_body_size 525M;
location / {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://vaultwarden-default;
}
#location /admin {
# proxy_http_version 1.1;
# proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection $connection_upgrade;
#
# proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Proto $scheme;
#
# proxy_pass http://vaultwarden-default;
#}
}
|
重启Nginx，然后就能通过域名访问了。
Vaultwarden升级
1
2
3
4
| cd /opt/vaultwarden
sudo docker-compose down
sudo docker pull vaultwarden/server:latest
sudo docker-compose up -d
|
后记
其它问题可查询官方文档。