Docker-Compose配置#

1
# 进入用户目录，新建应用目录
2
cd ~
3
mkdir bitwarden
4

5
# 编辑compose文件(参考下文)
6
nano ~/bitwarden/docker-compose.yml

文件内容参考:

1
version: '3.9'
2
services:
3
    srprolin:
4
        image: 'vaultwarden/server:1.35.4'
5
        ports:
6
            - '3012:3012'
7
            - '8080:80'
8
        restart: unless-stopped
9
        volumes:
10
            - '/vw-data/:/data/'
11
        container_name: vaultwarden
12
        environment:
13
            - WEBSOCKET_ENABLED=true

你可以提前使用docker pull来拉取镜像。

随后，执行启动命令即可跑通该容器：

1
# 进入应用目录
2
cd ~/bitwarden
3

4
# 启动容器
5
sudo docker compose up -d

Nginx+Certbot配置#

1
# 安装certbot
2
apt-get install -y certbot
3
apt-get install -y python3-certbot-nginx
4

5
# 申请Let's Encrypt的免费SSL证书
6
# 将<your-domain>改为已在DNS处解析过的域名
7
sudo certbot certonly --nginx -d <your-domain>
8

9
# 安装启动Nginx
10
apt-get update && apt-get install -y nginx
11
systemctl enable nginx && systemctl start nginx
12

13
# 编辑配置文件（参考下文）
14
nano /etc/nginx/sites-available/default
15

16
# 启用软链接
17
ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
18

19
# 测试文件格式
20
nginx -t
21

22
# 重载Nginx服务
23
systemctl reload nginx

配置文件内容参考：

1
# ==================== Bitwarden - HTTP ====================
2
server {
3
    listen 80;
4
    server_name <your-domain>;
5

6
    # HTTP自动跳转HTTPS
7
    return 301 https://$host$request_uri;
8
}
9

10
# ==================== Bitwarden - HTTPS ====================
11
server {
12
    listen 443 ssl http2;
13
    server_name <your-domain>;
14

15
    ssl_certificate /etc/letsencrypt/live/<your-domain>/fullchain.pem;
16
    ssl_certificate_key /etc/letsencrypt/live/<your-domain>/privkey.pem;
17

18
    location /notifications/hub {
19
        proxy_pass http://172.17.0.1:3012;
20
        proxy_set_header Host $host;
21
        proxy_set_header X-Real-IP $remote_addr;
22
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
23
        proxy_set_header X-Forwarded-Proto $scheme;
24
        proxy_http_version 1.1;
25
        proxy_set_header Upgrade $http_upgrade;
26
        proxy_set_header Connection "upgrade";
27
        proxy_read_timeout 86400s;
28
        proxy_send_timeout 86400s;
29
    }
30

31
    location / {
32
        proxy_pass http://172.17.0.1:8080;
33
        proxy_set_header Host $host;
34
        proxy_set_header X-Real-IP $remote_addr;
35
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
36
        proxy_set_header X-Forwarded-Proto $scheme;
37
        proxy_http_version 1.1;
38
        proxy_set_header Upgrade $http_upgrade;
39
        proxy_set_header Connection "upgrade";
40
    }
41
}

结语#

上述方法建立在长期使用，且有域名的前提下，此方法不需要开放云服务器厂商处的端口。
当然你可以使用宝塔、1Panel等服务器面板管理应用，一键安装配置Bitwarden
如果你只是测试，可以不进行Nginx配置，只在docker容器跑通后，开放云服务器厂商的8080TCP端口，即可通过http://ip:8080访问vaultwarden后台。

相关链接#

Docker-Compose配置#

Nginx+Certbot配置#

结语#