mydocker/bitwarden/README.md

Bitwarden / Vaultwarden

Password manager compatible with all Bitwarden clients. PostgreSQL backend with YubiKey 2FA.

Access

Endpoint	Details
Public URL	https://bward.sebson.space
Internal Port	9989 -> 80
Login	Email + Password + YubiKey OTP

Configuration

• Image: vaultwarden/server
• Database: PostgreSQL on postgres18:5432 (database: bitwarden)
• 2FA: YubiKey (YUBICO_CLIENT_ID + YUBICO_SECRET_KEY from .env)
• Yubico verification: self-hosted at bward.sebson.space/wsapi/2.0/verify

Storage

Path	Contents
./bitwarden/attachments/	Entry attachments
./bitwarden/sends/	Bitwarden Send files
./bitwarden/icon_cache/	Website icon cache
./bitwarden/tmp/	Temporary files
./bitwarden/rsa_key.pem	RSA private key
./bitwarden/rsa_key.pub.pem	RSA public key

Password data itself is stored in PostgreSQL (bitwarden DB on postgres18).

Dependencies

• postgres18 - primary database
• Traefik - reverse proxy with TLS
• YubiKey - hardware 2FA key (local verification server)

Useful Commands

# Follow logs
docker compose logs -f vaultwarden

# Database backup (via general script)
./backup_db.sh

# Restart
docker compose restart vaultwarden

# Export/import via Bitwarden CLI
bw export --format json