拥抱Bitwarden_rs – 开源的全平台密码管理器

尝试过Enpass，的确不错，但是只能在手机端同步20条密码，这个对于我这种重度互联网使用者来说，完全不够，后来又找了1Password，需要缴年费使用，只能放弃，一次偶然的机会看到了Bitwarden, 但是搭建的过程让人崩溃，还好在Github上找到他的第三方开源版本 Bitwarden，用docker安装，一路搞下来如行云流水，无比畅快

下面记录安装过程，先安装并启动docker

#安装Docker
yum -y install docker
#启动docker
systemctl start docker
#开机自启
systemctl enable docker

接下来使用Docker拉取bitwarden_rs镜像并运行

docker pull bitwardenrs/server:latest
docker run -d --name bitwarden -v bw-data:/data/ -p 8880:80 bitwardenrs/server:latest

接下来建个域名用nginx反代

server
    {
    listen 443 ssl http2;
  # certs sent to the client in SERVER HELLO are concatenated in ssl_certificate
    ssl_certificate /usr/local/nginx/conf/ssl/bw.tao314.cn/fullchain.cer;
    ssl_certificate_key /usr/local/nginx/conf/ssl/bw.tao314.cn/bw.tao314.cn.key;
    ssl_session_timeout 1d;
    ssl_session_cache shared:SSL:10m;
    ssl_session_tickets off;
# intermediate configuration. tweak to your needs.
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    
ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
    ssl_prefer_server_ciphers on;
# HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months)
    add_header Strict-Transport-Security max-age=15768000;
# OCSP Stapling ---
    # fetch OCSP records from URL in ssl_certificate and cache them
    ssl_stapling on;
    ssl_stapling_verify on;
server_name     youdomain.com;
   client_max_body_size 128M;
    location / {
        proxy_set_header  Host  'bw.tao314.cn';
        proxy_pass http://127.0.0.1:8880;
        proxy_redirect off;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
location /notifications/hub {
    proxy_pass http://127.0.0.1:3012;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
  }
location /notifications/hub/negotiate {
    proxy_pass http://127.0.0.1:8880;
  }
}

注意事项

1. 用https访问，不然会出错
2. 注意映射的目录写法，bw-data前后不要加“/”
3. 避开映射主机的80端口，可以开启其他的，比如8880，然后反代
4. bitwarden_rs项目地址：https://github.com/dani-garcia/bitwarden_rs

转载请注明：野草堂 » 拥抱Bitwarden_rs – 开源的全平台密码管理器