infrastructure/nixos-modules/vault/README.md

38 lines
1.4 KiB
Markdown
Raw Permalink Normal View History

2024-10-02 15:52:04 +02:00
# Vaultwarden / Bitwarden
To use our Vaultwarden instance, you can use the regular
[Bitwarden apps](https://bitwarden.com/download/) with our custom server when logging in:
Username: `first.lastname@qo.is`
Server Name: `https://vault.qo.is`
## Create Accounts
We currently [allow signups](https://vault.qo.is/#/register) for `@qo.is` email addresses.
Please instruct users to:
- use their full `firstname.lastname@qo.is` email so users may be connected to a LDAP database in the future
- remember that the login password is used to encrypt the password database and should therefor be good.
- the password cannot be reset without loosing all the passwords.
Use of [Emergency Contacts](https://bitwarden.com/help/emergency-access/) or Organizations may be advisable.
## Administration
An admin panel is available under [vault.qo.is/admin](https://vault.qo.is/admin).
The password is saved in the pass database under `vaultwarden-admin`.
In the administration panel, users and organizations may be managed.
Instance settings should be changed with the nixos module in the infrastructure repository only.
## Backup / Restore
1. `systemctl stop vaultwarden.service`
2. Import Postgresql Database Backup
3. Restore `/var/lib/bitwarden_rs`
4. `systemctl start vaultwarden.service`
5. Click `Force clients to resync` in the [Administration interface under _Users_](https://vault.qo.is/admin/users/overview)