Skip to content

Vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.

View the nix-core NixOS module on GitHub.

References

Sops

Replace abc123 with your actual secrets

vaultwarden:
    admin-token: abc123
    smtp-password: abc123 # only set this if `mailIntegration` is enabled

Optionally, you can store your admin token as an argon2 PHC string with the OWASP minimum recommended settings in sops. It is recommended to use an alphanumeric string only, as special characters may need to be escaped:

nix-shell -p openssl libargon2 --run 'echo -n "abc123" | argon2 "$(openssl rand -base64 32)" -e -id -k 19456 -t 2 -p 1'

Setup

  • Visit https://SUBDOMAIN.DOMAIN.TLD/admin and enter the admin token.
  • Click on "Users" in the top row.
  • Invite users via email in the box at the bottom.