Vaultwarden password manager

Your own Bitwarden-compatible password server. Your passwords stay on your Raspberry Pi in the data centre, not with a company you have to trust.

Why Vaultwarden

Vaultwarden is a lightweight server that speaks the Bitwarden protocol. It needs just a few tens of megabytes of RAM, so it barely registers on a Raspberry Pi 5. You keep using the official Bitwarden apps and browser extensions, you just point them at your own address.

docker run --detach --name vaultwarden \
  --env DOMAIN="https://vault.your-domain.com" \
  --volume /vw-data/:/data/ \
  --restart unless-stopped \
  --publish 127.0.0.1:8000:80 \
  vaultwarden/server:latest

Put Nginx or Caddy with a Let's Encrypt certificate in front of it. The web vault only works over HTTPS. Once your family has their accounts, turn off new sign-ups with SIGNUPS_ALLOWED=false.

Backups

Everything lives in the /vw-data directory. Copy it regularly to the NFS backup disk that comes with the hosting.