The fact remains that for the greatest majority of people coming here, using the official BW service hosted by Microsoft remains the most secure way to use Bitwarden. Do you honestly think that these people are knowledgeable enough to set up their own BW service securely? Are they knowledgeable enough to evaluate the original team, their product, its source, and its security to evaluate a completely different team, with a different source to set up a secure server and host a service without succumbing to all the pitfalls of novice self-hosting and to do it better than the guys at Azure?
BITWARDEN SELF HOSTED HOW TO
Most self-hosting posts today are chock-full of comments asking how to register a domain or set up dynamic DNS, or asking what is Docker. Maybe.įor most people visiting this sub today that is patently untrue! If they are experts in the field, maybe they can make it even more secure. Maybe in their hands, a self-hosted instance of BW can come close to the security provided by the official service. But none of that is a security feature.īW started as a tool for enthusiasts, people who probably can review and compile source code, set up a server, and run services securely - seasoned r/selfhosted and r/HomeServer folks. You can play around, learn some things, and get control of your own data.
BITWARDEN SELF HOSTED INSTALL
The fact that they both made it easy to install and run the service with Docker etc., and that there are a lot of guides on how to set the whole thing up is super awesome.
BITWARDEN SELF HOSTED CODE
The fact that Dani Garcia ported the code and allowed you to host BW_rs on a low-power device like a Pi or a small VPS is even more awesome. The fact that BW is open-source allowing the ability to self-host is a very awesome and unique feature. If you specify n, your instance will not use an SSL certificate and you will be required to front your installation with an HTTPS proxy, or else Bitwarden applications will not function properly.Please stop advertising the ability to self-host BW as a security feature - it's very misleading. For more information, see Certificate Options. This option is only recommended for testing.
Specify y to have Bitwarden generate a self-signed certificate for you. For more information, see Certificate Options.Īlternatively, specify n and use the self-signed SSL certificate? option, which is only recommended for testing purposes.ĭo you want to generate a self-signed SSL certificate? (y/n): You will be asked whether it is a trusted SSL certificate ( y/n). If you already have your own SSL certificate, specify y and place the necessary files in the C:\Bitwarden\bwdata\ssl\ directory. For more information, see What are my installation id and installation key used for?ĭo you have a SSL certificate to use? (y/n) Retrieve an installation key using a valid email at. For more information, see What are my installation id and installation key used for?
Retrieve an installation id using a valid email at. For more information, see Certificate Options.Īlternatively, specify n and use the do you have a SSL certificate to use? option. You will be prompted to enter an email address for expiration reminders from Let's Encrypt. Specify y to generate a trusted SSL certificate using Let's Encrypt. Typically, this value should be the configured DNS record.ĭo you want to use Let's Encrypt to generate a free SSL certificate? (y/n): Enter the domain name for your Bitwarden instance:
0 kommentar(er)
