Vaultwarden

Self-hosted Bitwarden-kompatibler Password Manager.

Vaultwarden Binary wird aus dem Docker-Image extrahiert (keine prebuilt Binaries verfügbar).

Tool: docker-image-extract

# Binary extrahieren
./docker-image-extract vaultwarden/server:latest
cp output/vaultwarden /opt/vaultwarden/
cp -r output/web-vault/* /opt/vaultwarden/web-vault/

• Bitwarden-kompatible API
• Browser Extensions
• Mobile Apps
• Organizations & Collections
• Admin Panel

/opt/vaultwarden/
├── vaultwarden          # Binary
├── .env                 # Environment config
├── data/                # SQLite DB + Attachments
└── web-vault/           # Web UI

Zwei Optionen:

• SQLite (default): /opt/vaultwarden/data/db.sqlite3
• PostgreSQL: 10.100.161.110

systemctl status vaultwarden
journalctl -u vaultwarden -f

• URL: https://vault.home.miskam.xyz/admin
• Token: In Vaultwarden selbst gespeichert

# Alles sichern
rsync -av /opt/vaultwarden/data/ backup/

ansible-playbook site.yml --limit vaultwarden

Alle Infrastruktur-Credentials sind hier gespeichert:

• Organisation: mxmlabs
• Collection: Network Automation

Das Ansible Bitwarden Lookup Plugin holt Secrets zur Laufzeit.

• Vaultwarden GitHub
• docker-image-extract
• Bitwarden Help