What does HackerNews think of vaultwarden?
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
If you like Bitwarden, it will do what you want if you pay for their premium account. If you don't want to do that, you can host your own bitwarden server (I think that this implementation does 2FA, but I'm not positive:
Bitwarden (optionally with self-hosted Vaultwarden) - Best UX for the FOSS options, syncs all your devices, overall just pretty good.
Website: https://bitwarden.com/
Vaultwarden: https://github.com/dani-garcia/vaultwarden
Desktop: https://keepassxc.org/
Android: https://www.keepassdx.com/
iOS: https://strongboxsafe.com/
Syncthing: https://syncthing.net/
pass: https://www.passwordstore.org/
gopass: https://www.gopass.pw/
https://github.com/dani-garcia/vaultwarden
Your password data, back under your own control.
I'd prefer to trust something like a self-hosted Vaultwarden instance [1] with emergency access [2]. Maybe with redundancy even.
My other concern, which may be unfounded is that Vaultwarden [1], which is an unofficial Rust rewrite, may also be developed to different, or lesser security standards than the official client. However I don't have any real reasons to suspect this.
To give a better example, recently on HN there was a discussion on self-hosting Bitwarden and its respective implementations. The official one[0] is written in C# and uses 15ish containers. The alternative one[1] is written in Rust and is a one application. I think both have their merits, since the former is used to serve possibly millions of users at this point, while the latter is best utilized in self-hosted home or SMB scenarios.
- changedetection This monitors webpages for changes and sends you notifications on multiple streams when they change. This is the service I have found the most awkward and least useful! (https://github.com/dgtlmoon/changedetection.io)
* ghost for blogging (https://ghost.org/)
- gotify for notifications to my phone (https://gotify.net/)
- grafana for streaming logs and metrics from these services (https://grafana.com/)
- heimdall for a vanity dashboard (https://heimdall.site/)
- homeassistant for all home automation needs (https://www.home-assistant.io/)
- matrix synapse for communication (https://matrix.org/)
* mealie for recipes and meal planning (https://mealie.io/)
- photoprism for photo storage (https://photoprism.app/)
- plausible for privacy respecting analytics (https://plausible.io/)
* portainer to do light admin on these containers (https://www.portainer.io/)
* send to replace wetransfer (https://gitlab.com/timvisee/send)
- splunk for logs/visualizations (https://www.splunk.com/)
* traefik to handle all the routing to the containers. When it doesn't work, it's very awkward to fix, but it almost always works just as you expect it to (https://traefik.io/)
* vaultwarden as a password manager (https://github.com/dani-garcia/vaultwarden)
* vikunja an incredible todo list service. I cannot recommend this highly enough! (https://vikunja.io/)
* wallabag a straightforward article saver/reader (https://www.wallabag.it/)
I have also hosted Mastodon in the past, and while it was easy to host, it would eat storage space too quickly for my small setup. It also doesn't lend itself well to being a single-user instance in my experience as it makes finding organic content difficult.
No privacy or security issues now since I own all my data, no subscription fees, and no complaints till now with the self-hosted setup. Definitely would recommend!
Reference impl. in C#: https://github.com/bitwarden/server
Self-host friendly impl. in Rust: https://github.com/dani-garcia/vaultwarden
p.s.: reference implementation is by far one of the better examples of how to do microservice-based C# solution of high code quality right.
- KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly.
- 1Password: my favorite of the bunch so far, great UI and UX, works seamlessly across all my devices with all the stuff I want and need: credit card info, logins, 2FA, automatic hidden email generation via Fastmail, easy sharing and family accounts work really well, CLI for use in scripts and now builtin SSH-key management. Not a huge fan of the subscription model, but probably the service I am most happy to pay for.
- LastPass: was forced to use this at my previous job, absolutely hated it. The UI and UX feels ten years behind 1Pass and Bitwarden, it's slow and not nearly as featureful as the alternatives. I switched from them when they were bought out by LogMeIn, but it doesn't look like the product has meaningfully changed since then.
- BitWarden: played around with this for a while, but didn't switch from 1Pass mostly because I am not willing to host something like this myself and it costs the same as 1Pass with less features and polish.
Personally, I would recommend 1Pass for a "it just works" and Bitwarden hosted yourself if you want the same but on your own premises via https://github.com/dani-garcia/vaultwarden.
You can see their server and client code here: https://github.com/bitwarden
I choose to use their clients unmodified, along with an instance of the server formerly known as "bitwarden_rs" running in my basement as the sync backend. https://github.com/dani-garcia/vaultwarden
I still pay them annually for their "freemium" features even though I prefer not to let them host my data.
My point about self-hosting password managers was aimed at a relatively common (but in my opinion, unwise) advice for people to just host their own instances of vaultwarden[1], but it also applies to file-based storage such as KeePass.
The vaultwarden install instructions assume Docker, for example: https://github.com/dani-garcia/vaultwarden. If you want to install native binaries, you're going to have to git fetch/checkout/pull the latest release tag and run `cargo build --features sqlite --release` yourself. Doable in a cronjob, but it'll probably take a compile to build a system like vaultwarden on a low-power ARM core.
In your case that might be migrating your photos off iCloud. I found the awesome-selfhosted[1] list to be excellent for trying out different products that match the size of the VPS you've got or maybe you just want to put that onto your local Synology NAS if you don't need your whole photo roll on the go.
Self hosted BitWarden is also another good starting point with the very lightweight vaultwarden[2] just make sure you always know where your vault is stored on your server and make backups.
While it's a long road it doesn't need to consume your life daily but it still requires you to keep up with all the things any sysadmin needs to handle like monthly patching, monitoring the logs for sustained abuse and break in attempts.
Subreddits /r/selfhosted and /r/homelab are also great places to have a browse.
[1] https://github.com/awesome-selfhosted/awesome-selfhosted#pho...
Also Bitwarden's software has multiple licenses, one of them being AGPL for the server and one of them being GPL for the client. The part of the code that's under the Bitwarden license which you have to pay for is SSO, SCIM and I think FIDO2 authentication as they use some Azure tools for all of these and as such they can't run on premises
Quoting from their license FAQ [1]:
> "In your GitHub repositories, how can I determine what license applies to a given software program?"
> "Each Bitwarden repository contains a LICENSE.txt file that spells out which license applies to the code in that repository."
> "In the case of the Bitwarden server repository, the files are organized into various directories. These directories are not only used for logical code organization, but also to clearly distinguish the license that a given source file falls under. All source files under the /bitwarden_license directory at the root of the server repository are subject to the Bitwarden License. If a file is not organized under the /bitwarden_license directory, the AGPL 3.0 license applies."
Vaultwarden offers those for free if you so wish, but there are no restrictions to self hosting Bitwarden.
[0]: https://github.com/dani-garcia/vaultwarden
[1]: https://github.com/bitwarden/server/blob/master/LICENSE_FAQ....
[1] https://github.com/dani-garcia/vaultwarden, note that it's different from Bitwarden's official server (https://bitwarden.com/help/install-on-premise-linux/), uses less CPU/memory, and enables premium features like TOTP for free.
I feel more comfortable with that than syncing a KeePass file over dropbox or google drive, mostly because I got myself into a nasty situation that way with a corrupted KeePass database a while back.