Passwort/Passwörter sicher speichern.

• Bitwarden - Open Source Password Manager für alle gängigen Plattformen
  • Bitwarden
  • Vaultwarden (früher Bitwarden_RS) - alternative implementation of the bitwarden server (Rust)

⚠️IMPORTANT⚠️: When using this server, please report any bugs or suggestions to us directly (Get in touch), regardless of whatever clients you are using (mobile, desktop, browser…). DO NOT use the official support channels.

> pkg install security/vaultwarden

oder

# cd /usr/ports/security/vaultwarden/
# make clean
# make config

# make
...

warning: `vaultwarden` (bin "vaultwarden") generated 11 warnings
    Finished release [optimized] target(s) in 0.16s
  Installing /var/ports/usr/ports/security/vaultwarden/work/stage/usr/local/bin/vaultwarden
   Installed package `vaultwarden v1.0.0 (/var/ports/usr/ports/security/vaultwarden/work/vaultwarden-1.30.0)` (executable `vaultwarden`)
warning: be sure to add `/var/ports/usr/ports/security/vaultwarden/work/stage/usr/local/bin` to your PATH to be able to run the installed binaries
/bin/mkdir -p /var/ports/usr/ports/security/vaultwarden/work/stage//usr/local/www/vaultwarden/data
install -m0600 /usr/ports/security/vaultwarden/files/vaultwarden_conf.in /var/ports/usr/ports/security/vaultwarden/work/stage//usr/local/www/vaultwarden/data/config.json.sample
====> Compressing man pages (compress-man)
===> Staging rc.d startup script(s)

# make install
===>  Installing for vaultwarden-1.30.0_1
===>  Checking if vaultwarden is already installed
===>   Registering installation for vaultwarden-1.30.0_1
Installing vaultwarden-1.30.0_1...
===> Creating groups.
Using existing group 'www'.
===> Creating users
Using existing user 'www'.
===> SECURITY REPORT: 
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/bin/vaultwarden

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type 'make deinstall'
      to deinstall the port if this is a concern.

      For more information, and contact details about the security
      status of this software, see the following webpage: 
https://github.com/dani-garcia/vaultwarden

# make clean

dedizierten Benutzer anlegen:

# pw groupadd -n vaultwarden
# pw useradd -n vaultwarden -m -M 0700 -g vaultwarden -s /usr/local/bin/bash

# touch /var/log/vaultwarden.log
# chown vaultwarden:vaultwarden /var/log/vaultwarden.log

# mkdir /home/vaultwarden/bin/
# vim /home/vaultwarden/bin/vaultwarden.sh
# chmod 0700 /home/vaultwarden/bin/vaultwarden.sh
# chown -R vaultwarden:vaultwarden /home/vaultwarden/bin/

# vim /usr/local/bin/vaultwarden.sh

/home/vaultwarden/bin/vaultwarden.sh

#!/usr/bin/env bash
 
cd /home/vaultwarden || exit 1
mkdir -p data web-vault/
 
#------------------------------------------------------------------------------#
# Dieser Server wird per Umgebungsvariablen gesteuert:
# https://github.com/dani-garcia/vaultwarden/blob/main/.env.template
#------------------------------------------------------------------------------#
#ROCKET_ADDRESS=0.0.0.0
#export ROCKET_ADDRESS
#ROCKET_PORT=8000
#export ROCKET_PORT
 
# https://github.com/dani-garcia/vaultwarden/wiki/Building-binary#install-the-web-vault
WEB_VAULT_ENABLED=false
export WEB_VAULT_ENABLED
 
LOG_FILE=/var/log/vaultwarden.log
export LOG_FILE
#------------------------------------------------------------------------------#
 
screen -d -m -S vaultwarden /usr/local/bin/vaultwarden

/usr/local/bin/vaultwarden.sh

#!/usr/bin/env bash
 
su - vaultwarden -c /home/vaultwarden/bin/vaultwarden.sh

… und jetzt starten wir ihn:

# /usr/local/bin/vaultwarden.sh

das Log kontrollieren:

# cat /var/log/vaultwarden.log 
[2024-04-03 22:26:38.536][start][INFO] Rocket has launched from http://0.0.0.0:8000

den offenen Port suchen:

# netstat -anp tcp | grep -F .8000
tcp4       0      0 127.0.0.1.8000         *.*                    LISTEN