密码管理工具自建-Bitwarden

自建

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
apiVersion: apps/v1
kind: Deployment
metadata:
name: vaultwarden
namespace: devops
spec:
replicas: 1
selector:
matchLabels:
app: vaultwarden
template:
metadata:
creationTimestamp: null
labels:
app: vaultwarden
spec:
volumes:
- name: data
persistentVolumeClaim:
claimName: vaultwarden-data
containers:
- name: vaultwarden
image: harbor-core.suosihulian.com/dockerhub/vaultwarden/server:1.29.2
ports:
- name: web
containerPort: 80
protocol: TCP
env:
- name: I_REALLY_WANT_VOLATILE_STORAGE
value: 'true'
- name: SIGNUPS_ALLOWED
value: 'true'
volumeMounts:
- name: data
mountPath: /data
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
imagePullPolicy: IfNotPresent
restartPolicy: Always
terminationGracePeriodSeconds: 10
dnsPolicy: ClusterFirst
securityContext: {}
schedulerName: default-scheduler
strategy:
type: Recreate
revisionHistoryLimit: 10
progressDeadlineSeconds: 600

一些启动参数

1
2
3
4
5
6
7
8
9
10
11
12
13
14
- SIGNUPS_ALLOWED=false #开启注册,自己注册后改成false
- SIGNUPS_DOMAINS_WHITELIST=gmail.com,qq.com #将注册限制为某些电子邮件域名
- SIGNUPS_VERIFY=true #要求新注册的用户在成功登录前进行电子邮件验证
- INVITATIONS_ALLOWED=false #禁止邀请用户
- SHOW_PASSWORD_HINT=false #关闭密码提示
- DOMAIN=https://bitwarden.xxx.com # 用于访问 Vaultwarden 实例的 URL
- SMTP_FROM=xxxx@qq.com
- SMTP_HOST=smtp.qq.com
- SMTP_PORT=465
- SMTP_SECURITY=force_tls
- SMTP_USERNAME=xxxx@qq.com
- SMTP_PASSWORD=xxxxxxxx
- ROCKET_WORKERS=10 #当 Vaultwarden 运行时,默认它会产生 2 * <cpu 核心数> 个 worker 来处理请求。在某些系统上,这可能会由于 worker 数量太少,从而导致性能降低
- LOG_FILE=/data/vaultwarden.log

备份路径为 /data

https://zhuanlan.zhihu.com/p/608118515