Commit files for public release

nixos-modules/vault/README.md

@@ -0,0 +1,37 @@
+# Vaultwarden / Bitwarden
+
+To use our Vaultwarden instance, you can use the regular
+[Bitwarden apps](https://bitwarden.com/download/) with our custom server when logging in:
+
+Username: `first.lastname@qo.is`  
+Server Name: `https://vault.qo.is`
+
+## Create Accounts
+
+We currently [allow signups](https://vault.qo.is/#/register) for `@qo.is` email addresses.
+
+Please instruct users to:
+
+- use their full `firstname.lastname@qo.is` email so users may be connected to a LDAP database in the future
+- remember that the login password is used to encrypt the password database and should therefor be good.
+- the password cannot be reset without loosing all the passwords.
+  Use of [Emergency Contacts](https://bitwarden.com/help/emergency-access/) or Organizations may be advisable.
+
+
+## Administration
+
+An admin panel is available under [vault.qo.is/admin](https://vault.qo.is/admin).
+The password is saved in the pass database under `vaultwarden-admin`.
+
+In the administration panel, users and organizations may be managed.
+Instance settings should be changed with the nixos module in the infrastructure repository only.
+
+
+## Backup / Restore
+
+1. `systemctl stop vaultwarden.service`
+2. Import Postgresql Database Backup
+3. Restore `/var/lib/bitwarden_rs`
+4. `systemctl start vaultwarden.service`
+5. Click `Force clients to resync` in the [Administration interface under _Users_](https://vault.qo.is/admin/users/overview)
+