vaultwarden

Open source rust server reimplementation

• GitHub

• No SSO implemented

  • Feature Requests
  • Enable user SSO access using OAuth
  • PR: SSO using OpenID Connect

Helm charts

• Helm charts on artifacthub
• gissilabs/vaultwarden
  • 14 contributors to the 2 charts
  • Recent updates
  • No dependencies
  • ✅ existingclaim
• gabe565/vaultwarden
  • Recent updates
  • 13 contributors to all charts
  • Vaulvarden image updates by Renovatebot
  • Dependencies:
    • bjw-s/common library chart
    • bitnami/postgresql
  • ✅ existingclaim
• guerzon/vaultwarden
  • No existingClaim, but keepPvc setting, uses the helm.sh/resource-policy: keep annotation
• andrenarchy/vaultwarden
  • Still based on long archived k8s-at-home/common libracry chart

Setup

• Enable admin portal
• Hash admin token with argon2
• Create organisation
• Create collections

Invitations

Signup and invitations should be disabled:

• SIGNUPS_ALLOWED: false
• INVITATIONS_ALLOWED: false
• SIGNUPS_DOMAINS_WHITELIST should contain only neccessary/trusted domains

To invite users:

• Temporarily modify INVITATIONS_ALLOWED and SIGNUPS_DOMAINS_WHITELIST
• Admin user invites user from the admin portal
• User clicks on link in the invite email and logs in
• Admin user adds user to collections
• Admin user needs to confirm the new user in the collection
• After this, remove the temporary modifications from above

Backup

• Backing up your vault
• vaultwarden-backup A simple cron powered backup image for vaultwarden.