this post was submitted on 15 Feb 2024
18 points (100.0% liked)

Selfhosted

45475 readers
654 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
18
Self hosted open source simultaneous multiuser password safe with .deb or .rpm and an end user webui/android app (lemmy.world)
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
21 comments fedilink hide all child comments
 

I'm looking into different self hosted open source multiuser password safes and while there are many options I haven't found one with a .deb or .rpm install - only a whole bunch of docker compose.

Do you know of any good options that are included in debian 12 or fedora 39 repositories or at least that has a .deb or .rpm?

Currently I'm using keepassxc but been asked for something that either has a webui login for end users or an android app.

edit 2024-02-17:
After looking into the .deb and .rpm options available (passbolt or unofficial vaultwarden-deb) I decided to bite the bullet and install a debian 12 vm that I will try out different docker solutions on.

all 22 comments
sorted by: hot top controversial new old
[–] [email protected] 15 points 1 year ago (1 children)

Vaultwarden is simpler to selfhost implementation of Bitwarden server fully compatible with it's apps.

ArchLinux have the server in official repos.

For Debian (.deb) I have found this unofficial repo: https://github.com/gvtulder/vaultwarden-deb Be mindful it suggests stupid installation method by downloading and executing the install.sh script directly, you may want to read it yourself before install.

For .rpm I haven't find any repositories that are actively maintained, but you may have more luck.

[–] [email protected] 2 points 1 year ago

Thanks for the recommendation! Gonna look into vaultwarden-deb.

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (1 children)

There are keepass android apps like KeePassDX. You can have server sync with WebDav, but I don't know about shared databases. Should work if you configure the WebDav server etc.

A friend of mine is a big fan of bitwarden but I have no Idea if that fits your requirement. Should have a webui tho.

[–] [email protected] 3 points 1 year ago (1 children)

The problem with the KeePass apps is that it works by syncing database files which means that there can be sync conflicts. Okay for me to handle, but not for the rest of my household.
I really want a server-client system where everyone works in the same database.

Bitwarden is Docker, but also very well-liked. Might have to give up on the .deb / .rpm wish.
Thanks for the suggestion!

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago) (2 children)

KeepassXC implements a specific shared mode which is made to avoid conflicts.

I have no idea why no one uses it, I use it, works well.

[–] [email protected] 2 points 1 year ago

I use it too, works just fine.

[–] [email protected] 2 points 1 year ago (1 children)

This is the reason I don't use a shared database, I think that's what you're referencing?
Add ability to sync group structure with KeeShare - Status:Open
https://github.com/keepassxreboot/keepassxc/issues/3045

[–] [email protected] 2 points 1 year ago (1 children)

KeyShare is, this issue is specifically about groups within KeyShare, you can create one KeyShare for each group if you require groups.

[–] [email protected] 1 points 1 year ago

Would work if it was planned to be a system used by only techies or if we knew exactly what groups are wanted beforehand. Definitely gonna remember the tip, splitting it into several shared dbs didn't even hit me as an option.

[–] [email protected] 5 points 1 year ago

The usual go to for self hosted password managers is VaultWarden. There's no deb or rpm package but you can get it spun up with docker pretty easily. Any reason you're specifically looking for "included" or packaged solutions? That's going to severely limit your options.

[–] [email protected] 4 points 1 year ago (1 children)

A quick search led me to Passbolt which has multiple user support, native installs for both Debian and Fedora (you'll need to add their repo manually, though) and an Android app, so it seems to fit all your criteria.

Just curious, are there any specific reasons you wish to avoid docker?

[–] [email protected] 3 points 1 year ago (1 children)

Easier for me to add a vm in my current system to handle backup, rollbacks and system updates. I'm much more confident that I can quickly restore a vm to new hardware f.e. Which feels important for a password vault.

Thanks a lot for the passbolt recommendation. Gonna look into it now!

[–] [email protected] 2 points 1 year ago (1 children)

If you're already using a VM anyway (especially for the backend/web UI piece) restoring the image won't be any different for a server running docker vs one running apt packages.

[–] [email protected] 2 points 1 year ago (1 children)

True, I could use VM+Docker as you say. I've been thinking of making a dedicated "Docker VM" before when I've looked at interesting projects that has no other offerings.
I've felt that using docker in a vm robs docker of it's advantages so why use it at all if I'm planning on having a vm? I guess one answer is "because the software you want is delivered as a docker image".

[–] [email protected] 2 points 1 year ago (1 children)

It may seem like unnecessary overhead, but dockerized vaultwarden in a VM has been a huge improvement for me compared to unix-pass.

And with the volumes set up right, moving it is as easy as copy/pasting the folder it all lives in.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Sounds like I should get my docker vm. :)

[–] [email protected] 1 points 1 year ago (1 children)

Bitwarden have deb and rpm support.

[–] [email protected] 1 points 1 year ago (1 children)

Only client side from what I can find. The server seems to be Docker based.

[–] [email protected] 3 points 1 year ago (1 children)

Server side is more complex. So for serverside you will be hard to find non docker og non manual installasion.

[–] [email protected] 1 points 1 year ago (1 children)

Passbolt and Vaultwarden has been recommended so far. Gonna look into them later! :)

[–] [email protected] 2 points 1 year ago

Vaultwarden is a lightweight server of bitwarden.

Alternative implementation of the Bitwarden server API written in Rust and compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal.

GitHub vaultwarden