3 ms·
And what happens on reboot ? Then you get to hardware solutions, and a small website is not going to want that.
by BiteCode_dev 4y ago
And what happens on reboot ? Then you get to hardware solutions, and a small website is not going to want that.
- thaumasiotes 4y ago"What happens on reboot" is a good question for a scheme that involves not using the filesystem, but bitwarden is not such a scheme. Everything will be fine after a reboot.
- BiteCode_dev 4y agoYou need your app to have the bitwarden decryption passphrase to read it. Do you intent to enter that manually if the server reboots ? If not, then it's a secret you must manage, and you are back to square one: either using a simpler solution, use a hardware key, or going full secure vault service, with privileged first request, and so on.
- thaumasiotes 4y agoThe passphrase is hardcoded and kept in version control. ;D
- e12e 4y agoYou need to unlock bitwarden. As mentioned above - this is more a solution for local development (against a non-local db). For a service, one would need some kind of secret management - but a shell script could set this variable/value for input to eg docker or a k8s setup. Or the service (eg: heroku) could handle it.