使用bitwarden_rs搭建安全密码库服务器

wget -qO- get.docker.com | bash

curl -L https://github.com/docker/compose/releases/download/1.16.1/docker-compose-`uname -s`-`uname -m` > ./docker-compose
mv ./docker-compose /usr/bin/docker-compose
chmod +x /usr/bin/docker-compose

systemctl enable docker
systemctl start docker
systemctl status docker

docker run --rm -it vaultwarden/server /vaultwarden hash

docker run -d --name bitwarden --restart=always -v /bw-data/:/data/ -p 45729:80 -e SIGNUPS_ALLOWED=false -e INVITATIONS_ALLOWED=false -e ADMIN_TOKEN=`ADMIN_TOKEN值` vaultwarden/server:latest

docker run -d --name bitwarden --restart=always -e EXPERIMENTAL_CLIENT_FEATURE_FLAGS=ssh-key-vault-item,ssh-agent -e TZ=Asia/Shanghai -e SHOW_PASSWORD_HINT=false -v /bw-data/:/data/ -p 45729:80 -e SIGNUPS_ALLOWED=false -e INVITATIONS_ALLOWED=false -e ADMIN_TOKEN='$argon2id$v=19$m=65540,t=3,p=4$iK/BPqYwoMPsukcDLJH+oUV1OSGkI0NRSgpGJam3Y6A$PTk/xhEI0bWQk8mWwk8HWdOQMwOipBAtMSEU8CAt274' vaultwarden/server:latest

docker start bitwarden

docker stop bitwarden

docker rm bitwarden

docker stop bitwarden
docker pull vaultwarden/server:latest
docker start bitwarden

docker restart bitwarden
# 手动检查文件更新
# ls -l /bw-data/db.sqlite3
# rclone ls rclonename:bitwarden/db.sqlite3
rclone sync /bw-data/db.sqlite3 rclonename:bitwarden --update
#rclone sync /bw-data/db.sqlite3 rclonename:bitwarden --ignore-times --size-only

#!/bin/bash
# 重新启动 Bitwarden Docker 容器
docker restart bitwarden

# 等待 Bitwarden 容器启动完成
sleep 3

# 获取 Bitwarden 数据库文件的 MD5 值
db_md5_before=$(md5sum /bw-data/db.sqlite3 | awk '{print $1}')

# 再次获取 Bitwarden 数据库文件的 MD5 值
db_md5_after=$(md5sum /root/bitwarden/db.sqlite3 | awk '{print $1}')

# 如果 MD5 值没有变化，则结束脚本
if [ "$db_md5_before" == "$db_md5_after" ]; then
  echo "Bitwarden 数据库没有更新，脚本退出。"
  exit 0
fi

# 
cd /root/bitwarden/
rm /root/bitwarden/db.sqlite3
cp -f /bw-data/db.sqlite3 /root/bitwarden
# 把备份压缩包文件通过github私有仓库
git add --all
# 指定时间格式
DATE=$(TZ=Asia/Shanghai date +%Y-%m-%d_%H:%M:%S)
git commit -m "$DATE"
git push
echo "github push推送更新成功。"
# 下面是网盘备份
# 把db.sqlite3加密压缩
# 指定时间格式
DATE=$(TZ=Asia/Shanghai date +%Y%m%d%H%M%S)
zip -P yourpassword  -r /bw-data/tmp/bw-$DATE.zip /bw-data/db.sqlite3 /bw-data/sends
# 把备份压缩包文件通过rclone上传到网盘
rclone copy /bw-data/tmp/*.zip rclonename:bitwarden
# 删除15天前的备份文件
rclone delete rclonename:bitwarden --min-age 15d
# 删除压缩包文件
rm /bw-data/tmp/*.zip
echo "删除压缩包文件"
# 提示用户更新完成
echo "Bitwarden 数据库已经更新完毕。"

chmod +x bitwarden_backup.sh

23 11 * * *  root bash /root/bitwarden_backup.sh

systemctl restart cron.service
/etc/init.d/cron restart

rclone sync rclonename:bitwarden/db.sqlite3 /bw-data  --ignore-times --size-only
docker restart bitwarden

#!/bin/bash
rm /root/bitwarden/db.sqlite3
# 例如从github恢复
cd /root/bitwarden && git pull
# 或者从rclone恢复，二选一即可
rclone copy rclonename:bitwarden/db.sqlite3  /root/bitwarden

# 获取 Bitwarden 数据库文件的 MD5 值
db_md5_before=$(md5sum /root/bitwarden/db.sqlite3 | awk '{print $1}')

# 再次获取 Bitwarden 数据库文件的 MD5 值
db_md5_after=$(md5sum /bw-data/db.sqlite3 | awk '{print $1}')

# 如果 MD5 值没有变化，则结束脚本
if [ "$db_md5_before" == "$db_md5_after" ]; then
  echo "Bitwarden 数据库没有更新，脚本退出。"
  exit 0
fi

rm /bw-data/db.sqlite3 /bw-data/db.sqlite3-shm /bw-data/db.sqlite3-wal
cp /root/bitwarden/db.sqlite3 /bw-data

# 重新启动 Bitwarden Docker 容器
docker restart bitwarden

# 等待 Bitwarden 容器启动完成
sleep 3

# 提示用户更新完成
echo "Bitwarden 数据库已经更新完毕。"

server {
	listen 80;
	listen [::]:80;
	server_name example.com;
	return 301 https://$server_name$request_uri;
}
server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name example.com;
  location / {
  proxy_pass http://127.0.0.1:45729;
  proxy_redirect off;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  ssl on;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  ssl_certificate      /etc/letsencrypt/live/example.com/fullchain.pem;
  ssl_certificate_key  /etc/letsencrypt/live/example.com/privkey.pem;
}