Docker 安装 Bitwarden_RS

• 安装Docker
  
  1	curl -fsSL https://get.docker.com | sudo bash -s docker && sudo systemctl enable --now docker

• 安装Docker Compose
  
  1 2	sudo curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose && sudo chmod +x /usr/local/bin/docker-compose sudo ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose

•  创建docker-compose.yml
  
  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

  mkdir -p /data/wwwroot/bitwarden   #创建docker-compose.yml cat <<EOF >/data/wwwroot/bitwarden/docker-compose.yml version: "3" services:   bitwarden:     image: vaultwarden/server     container_name: bitwardenrs     restart: always     ports:         - "127.0.0.1:3256:80"         - "127.0.0.1:3012:3012"     volumes:       - ./bw-data:/data     environment:       WEBSOCKET_ENABLED: "true"       SIGNUPS_ALLOWED: "true"       WEB_VAULT_ENABLED: "true"       ADMIN_TOKEN: "openssl rand -base64 48生成" EOF

• 安装Bitwarden_RS
  
  1	cd /data/wwwroot/bitwarden && docker-compose up -d

• Nginx反代
  
  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  location / {   proxy_pass http://127.0.0.1:3256;   proxy_http_version 1.1;   proxy_cache_bypass $http_upgrade;   proxy_set_header Upgrade $http_upgrade;   proxy_set_header Connection "upgrade";   proxy_set_header Host $host;   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   proxy_set_header X-Forwarded-Proto $scheme;   proxy_set_header X-Forwarded-Host $host;   proxy_set_header X-Forwarded-Port $server_port;   proxy_redirect off; } location /notifications/hub {   proxy_pass http://127.0.0.1:3012;   proxy_set_header Upgrade $http_upgrade;   proxy_set_header Connection "upgrade"; } location /notifications/hub/negotiate {   proxy_pass http://127.0.0.1:3256; } location /admin {   proxy_pass http://127.0.0.1:3256;   proxy_set_header Host $host;   proxy_set_header X-Real-IP $remote_addr;   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;   proxy_set_header X-Forwarded-Proto $scheme; }

• 关闭注册
  
  1 2 3 4 5 6

  cd /data/wwwroot/bitwarden && docker-compose down   #修改SIGNUPS_ALLOWED: "true"为SIGNUPS_ALLOWED: "false" nano docker-compose.yml   docker-compose up -d

来源详情: 使用bitwarden_rs搭建自己的密码管理器服务