Лучшие самохостинговые менеджеры паролей: сравнение и настройка безопасности

# Установка Docker для Ubuntu/Debian
sudo apt update
sudo apt install -y apt-transport-https ca-certificates curl software-properties-common
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
sudo apt update
sudo apt install -y docker-ce docker-ce-cli containerd.io
sudo usermod -aG docker ${USER}

# Установка Docker Compose
sudo curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose

mkdir ~/bitwarden
cd ~/bitwarden

# Создание docker-compose.yml
version: '3'

services:
  web:
    image: bitwarden/web:latest
    container_name: bitwarden_web
    restart: always
    depends_on:
      - api
    networks:
      - bw-network
    environment:
      - WEBSOCKET_ENABLED=true
      - SIGNUPS_ALLOWED=true
    volumes:
      - ./config:/config
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.bitwarden.rule=Host(`ваш_домен.com`)"
      - "traefik.http.routers.bitwarden.entrypoints=websecure"
      - "traefik.http.routers.bitwarden.tls.certresolver=myresolver"
      - "traefik.http.services.bitwarden.loadbalancer.server.port=80"
    ports:
      - "80:80"
      - "443:443"

  api:
    image: bitwarden/api:latest
    container_name: bitwarden_api
    restart: always
    depends_on:
      - mysql
      - redis
    networks:
      - bw-network
    environment:
      - WEBSOCKET_ENABLED=true
    volumes:
      - ./config:/config

  mysql:
    image: mysql:8.0
    container_name: bitwarden_mysql
    restart: always
    command: --default-authentication-plugin=mysql_native_password
    networks:
      - bw-network
    environment:
      MYSQL_ROOT_PASSWORD=сильный_пароль_для_базы_данных
      MYSQL_DATABASE=bitwarden
      MYSQL_USER=bitwarden
      MYSQL_PASSWORD=сильный_пароль_пользователя_базы
    volumes:
      - mysql-data:/var/lib/mysql
      - ./config/mysql:/etc/mysql/conf.d

  redis:
    image: redis:6-alpine
    container_name: bitwarden_redis
    restart: always
    networks:
      - bw-network
    command: redis-server --requirepass сильный_пароль_для_redis
    volumes:
      - redis-data:/data

volumes:
  mysql-data:
  redis-data:

networks:
  bw-network:
    driver: bridge

docker-compose up -d

# После завершения настройки изменить SIGNUPS_ALLOWED на false
sed -i 's/SIGNUPS_ALLOWED=true/SIGNUPS_ALLOWED=false/' docker-compose.yml

# Перезапустить контейнеры
docker-compose down
docker-compose up -d