Bitwarden / Vaultwarden
Password manager compatible with all Bitwarden clients. PostgreSQL backend with YubiKey 2FA.
Access
Configuration
- Image:
vaultwarden/server
- Database: PostgreSQL on
postgres18:5432 (database: bitwarden)
- 2FA: YubiKey (
YUBICO_CLIENT_ID + YUBICO_SECRET_KEY from .env)
- Yubico verification: self-hosted at
bward.sebson.space/wsapi/2.0/verify
Storage
| Path |
Contents |
./bitwarden/attachments/ |
Entry attachments |
./bitwarden/sends/ |
Bitwarden Send files |
./bitwarden/icon_cache/ |
Website icon cache |
./bitwarden/tmp/ |
Temporary files |
./bitwarden/rsa_key.pem |
RSA private key |
./bitwarden/rsa_key.pub.pem |
RSA public key |
Password data itself is stored in PostgreSQL (bitwarden DB on postgres18).
Dependencies
- postgres18 - primary database
- Traefik - reverse proxy with TLS
- YubiKey - hardware 2FA key (local verification server)
Useful Commands
# Follow logs
docker compose logs -f vaultwarden
# Database backup (via general script)
./backup_db.sh
# Restart
docker compose restart vaultwarden
# Export/import via Bitwarden CLI
bw export --format json
blasebast
9b069a15c4