4 ms·
I was self-hosting bitwarden-rs (alternative implementation in Rust) in a Docker container, and I had set up Watchtower to automatically update it nightly. I th
by kivle 4y ago
I was self-hosting bitwarden-rs (alternative implementation in Rust) in a Docker container, and I had set up Watchtower to automatically update it nightly. I thought I would be relatively safe and keep up with updates.
Well, it turns out the project in question had to change their name from bitwarden-rs to vaultwarden-rs since they violated the trademark. Updates stopped being pushed to the original docker image url, and several months passed until I suddenly noticed this. In the meantime I could easily have missed some important security upgrades.
I understand it's only myself at fault here, but it made me migrate to a hosted account instead. As fun as it is to self host things, something this security critical is probably better left to dedicated people.