Find out how to deploy a Bitwarden server with Docker

Bitwarden is one in all my favourite password managers. However in the event you’re severely involved about safety and would reasonably not save your password database on a third-party server, you may need to take into account deploying your personal Bitwarden server.

That may sound like a critical problem however, due to Docker, it is really fairly easy. I’ll present you find out how to do exactly that.

SEE: Password breach: Why popular culture and passwords do not combine (free PDF) (TechRepublic)

What you will want

The one stuff you’ll must make this occur are a server that helps Docker and a consumer with sudo privileges. I’ll be demonstrating on Ubuntu Server 20.04.

Prepared? Okay.

Find out how to set up Docker

On the off likelihood you do not have Docker put in, let’s achieve this now. We’ll be utilizing Docker Compose, so there’s extra to the set up than regular. 

First, set up the mandatory dependencies with:

sudo apt set up apt-transport-https ca-certificates curl gnupg-agent software-properties-common -y

Subsequent, add the Docker GPG key with:

curl -fsSL https://obtain.docker.com/linux/ubuntu/gpg | sudo apt-key add -

Be aware: The above technique of including a secret is deprecated however nonetheless works.

Add the right repository:

sudo add-apt-repository "deb [arch=amd64] https://obtain.docker.com/linux/ubuntu $(lsb_release -cs) secure"

Replace apt and set up with the next:

sudo apt replace
sudo apt set up docker-ce docker-ce-cli containerd.io docker-compose

Find out how to create the Bitwarden consumer

To be protected, we’ll run all of this with a selected consumer. First, we’ll create a listing for the consumer with:

sudo mkdir /choose/bitwarden

Create the consumer with:

sudo adduser bitwarden

Give the newly created listing the right permission and possession with:

sudo chmod -R 700 /choose/bitwarden
sudo chown -R bitwarden:bitwarden /choose/bitwarden

Add the bitwarden consumer to the docker group with:

sudo usermod -aG docker bitwarden

Change to the bitwarden consumer with:

su bitwarden
cd

Find out how to obtain the installer script and deploy Bitwarden

Obtain the helpful installer script with:

curl -Lso bitwarden.sh https://go.btwrdn.co/bw-sh && chmod 700 bitwarden.sh

Earlier than we run the installer script, be sure you haven’t got an internet server already operating (as a result of Bitwarden goes to run on port 80 and it will not begin if that port is already taken). Kill Apache with:

sudo systemctl cease apache2

If it is a Purple Hat-based machine, that command could be:

sudo systemctl cease httpd

In case you’re utilizing NGINX, cease it with the command:

sudo systemctl cease nginx

Run the installer with:

./bitwarden.sh set up

You can be requested for an FQDN. In case you do not plan on accessing Bitwarden from outdoors your LAN, you may at all times simply use an IP handle for that.

This may take a while for all the containers to drag and deploy.

Subsequent, we have to configure the SMTP server that Bitwarden will use. After the deployment completes, open the configuration file with:

nano ~/bwdata/env/world.override.env

In that file, seek for and configure the next sections, utilizing an out there SMTP server (I used Google’s):

globalSettings__mail__smtp__host=REPLACE
globalSettings__mail__smtp__port=REPLACE
globalSettings__mail__smtp__ssl=REPLACE
globalSettings__mail__smtp__username=REPLACE
globalSettings__mail__smtp__password=REPLACE
adminSettings__admins= ADMIN_EMAIL

Ensure that to exchange each occasion of REPLACE together with your SMTP server settings and ADMIN_EMAIL with an e mail handle for the admin consumer. Save and shut the file. 

Lastly, begin the Bitwarden server with:

./bitwarden.sh begin

Find out how to entry your Bitwarden server

Open an internet browser and level it to https://SERVER (the place SERVER is the IP handle or area of the machine internet hosting your Bitwarden server). Try to be introduced with the Bitwarden internet UI (Determine A).

Determine A

Click on Create Account to create your Bitwarden account. As soon as you’ve got created it, log in with the credentials and you can begin utilizing your Bitwarden server to accommodate your passwords … all of which is able to stay by yourself {hardware}.

Cybersecurity Insider Publication

Strengthen your group’s IT safety defenses by maintaining abreast of the newest cybersecurity information, options, and greatest practices.
Delivered Tuesdays and Thursdays

Join right now

Additionally see