5 ms·

Maybe some sort of self hosting arrangement would work for you? I self-host Bitwarden behind a Wireguard VPN so it's only visible to devices I've authorised. Se

Maybe some sort of self hosting arrangement would work for you? I self-host Bitwarden behind a Wireguard VPN so it's only visible to devices I've authorised. Self-hosting comes with it's own risks of course but you would at least be in control of your data.

nabaraz 4y ago
Interesting approach. Any blogs you could point me to? I am also looking to self-host Bitwarden.
- danparsonson 4y ago
  For myself, I just followed Bitwarden's own instructions to get the server set up: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/ As for Wireguard, this looks pretty comprehensive: https://dev.to/tangramvision/what-they-don-t-tell-you-about-setting-up-a-wireguard-vpn-1h2g https://dev.to/tangramvision/what-they-don-t-tell-you-about-... There are nice mobile clients available for both BW and WG.
- przemub 4y ago
  I think you don't need anything else by the README of vaultwarden. https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden It has worked for me great without any issues for over a year now.
  - FlyingSnake 4y ago
    Long time Vaultwarden user as well. The VW docker image works wonders for me.
  - wise0wl 4y ago
    I agree. I've been using Vaultwarden on ARM for over a year and it's been flawless. Just excellent execution and seamless integration with the iOS App Store version of the Bitwarden client.
l72 4y ago
I do the same. I run bitwarden_rs as a docker container on a raspberry pi on my home network. Then use wireguard so I am always connected to my home network. This works great for my family. Simple set up, and I've done 0 maintenance on it.
- eddieroger 4y ago
  Have you set your family up with Wireguard as well? Did you do the setup manually or do something else clever to get their devices in your network? I've been spending a lot of time thinking about this, and always end back up at MDM, which is not a terribly desirable ending, but can't necessarily put hands on a device readily for some of them.
  - smw 4y ago
    tailscale
  - l72 4y ago
    I set it up manually for my family members. My biggest issue is that I have wireguard automatically enable itself when not on my home network. But there are some other networks that need to be excluded, like most airline wifis, as they don't have internet access when just trying to watch a movie. iCloud private relay does a good job of detecting these types of networks and correctly disabling itself. I wish there was something in the wireguard client to do this, rather than just retrying over and over again... And since wireguard sets the DNS to use the pihole on my home network, this becomes problematic if they connect to a network that has a captive portal, and needs the wifi's DNS to accept the agreement and get access to the internet before switching over to wireguard and my home DNS.

nabaraz 4y ago

Interesting approach. Any blogs you could point me to? I am also looking to self-host Bitwarden.

danparsonson 4y ago
For myself, I just followed Bitwarden's own instructions to get the server set up: https://bitwarden.com/help/install-on-premise-linux/ https://bitwarden.com/help/install-on-premise-linux/ As for Wireguard, this looks pretty comprehensive: https://dev.to/tangramvision/what-they-don-t-tell-you-about-setting-up-a-wireguard-vpn-1h2g https://dev.to/tangramvision/what-they-don-t-tell-you-about-... There are nice mobile clients available for both BW and WG.
przemub 4y ago
I think you don't need anything else by the README of vaultwarden. https://github.com/dani-garcia/vaultwarden https://github.com/dani-garcia/vaultwarden It has worked for me great without any issues for over a year now.
- FlyingSnake 4y ago
  Long time Vaultwarden user as well. The VW docker image works wonders for me.
- wise0wl 4y ago
  I agree. I've been using Vaultwarden on ARM for over a year and it's been flawless. Just excellent execution and seamless integration with the iOS App Store version of the Bitwarden client.

l72 4y ago

I do the same. I run bitwarden_rs as a docker container on a raspberry pi on my home network. Then use wireguard so I am always connected to my home network. This works great for my family. Simple set up, and I've done 0 maintenance on it.

eddieroger 4y ago
Have you set your family up with Wireguard as well? Did you do the setup manually or do something else clever to get their devices in your network? I've been spending a lot of time thinking about this, and always end back up at MDM, which is not a terribly desirable ending, but can't necessarily put hands on a device readily for some of them.
- smw 4y ago
  tailscale
- l72 4y ago
  I set it up manually for my family members. My biggest issue is that I have wireguard automatically enable itself when not on my home network. But there are some other networks that need to be excluded, like most airline wifis, as they don't have internet access when just trying to watch a movie. iCloud private relay does a good job of detecting these types of networks and correctly disabling itself. I wish there was something in the wireguard client to do this, rather than just retrying over and over again... And since wireguard sets the DNS to use the pihole on my home network, this becomes problematic if they connect to a network that has a captive portal, and needs the wifi's DNS to accept the agreement and get access to the internet before switching over to wireguard and my home DNS.