Docker 架設Vaultwarden密碼管理工具

Vaultwarden是以Bitwarden為原型、用Rust語言重新改寫的版本，比原始的Bitwarden更加輕量化

安裝Vaultwarden

docker pull vaultwarden/server

cd /var/lib/docker/volumes

mkdir vaultwarden

cd vaultwarden

建立docker-compose.yml

version: '3'
services:
  app:
    image: 'vaultwarden/server:latest'
    container_name: vaultwarden
    restart: always
    volumes:
      - ./vw-data/:/data/
    environment:
      - ADMIN_TOKEN=1qaxxwsx3xx
    ports:
      - 80:80
      - 443:443

docker compose up -d

管理介面

Vaultwarden強制使用SSL才能使用，Docker啟動後先進入admin頁面修改網域 http://ip/admin

Admin Token為上方docker-compose.yml的token

修改網域

修改ADMIN TOKEN

Nginx 反向代理設定

server {
	listen 443 ssl;
	ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/xxx.com/privkey.pem;
	root /var/www/html;
	index index.php;
	server_name xxx.com;
	server_tokens off;
	location /vaultwarden/ {
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_pass http://ip/;
}

瀏覽器輸入https://xxx.com/vaultwarden/