New NS8 Module: Vaultwarden (Bitwarden-compatible Password Manager)

App
1

Hi everyone,

we have packaged Vaultwarden (1.37.4) as a native rootless module for NethServer 8 (NS8) and submitted it for inclusion in NethForge!

Key Features

  • Vaultwarden 1.37.4 running in a rootless Podman pod behind the NS8 Traefik reverse proxy (with WebSocket, HTTP-to-HTTPS redirect, and Let’s Encrypt support)
  • Admin Panel (/admin) & Automatic Argon2id PHC Hashing: Enable/disable /admin and set the admin password directly in the NS8 Web UI (automatically converted into a secure Argon2id PHC ADMIN_TOKEN)
  • Registration & Security Policies in the NS8 UI:
    • Open signups (SIGNUPS_ALLOWED), email verification (SIGNUPS_VERIFY), and allowed email domain whitelist (SIGNUPS_DOMAINS_WHITELIST)
    • Organization invitations (INVITATIONS_ALLOWED), Bitwarden Send (SENDS_ALLOWED), Emergency Access (EMERGENCY_ACCESS_ALLOWED), Organization Audit Logs (ORG_EVENTS_ENABLED), and password hints (SHOW_PASSWORD_HINT)
  • Automatic NS8 Smarthost / SMTP Integration: Automatically discovers the cluster Smarthost from Redis and reloads on smarthost-changed events (with optional custom SMTP_FROM sender address)
  • NS8 LDAP / Active Directory User Invitation Sync: Optional vaultwarden_ldap sidecar container bound to an NS8 user domain (Ldapproxy) that automatically sends Vaultwarden email invitations to discovered domain users
  • Mobile Push Notifications: Configure Bitwarden Push Relay (PUSH_INSTALLATION_ID & PUSH_INSTALLATION_KEY from https://bitwarden.com/host) directly in the UI
  • Consistent Online SQLite Backup & Restore: Uses /vaultwarden backup (VACUUM INTO) in module-dump-state before Restic snapshots and automatically promotes the snapshot on restore-module (plus full clone-module and update-module support)

How to Test / Install right now

Option 1: Via NS8 Software Center (Custom Repository until NethForge PR is merged)

  1. Go to Software center → Settings → Software repositories → Add repository
  2. Enter:
    • Name: bls-isp-vaultwarden
    • URL: https://raw.githubusercontent.com/BLS-ISP/NS8-Vaultwarden/repomd/
    • Status: Enabled
  3. Install Vaultwarden from the Software Center and configure it under Settings → vaultwarden1.

** Links & Pull Requests**

1 Like