{"id":1352,"date":"2021-10-24T21:34:15","date_gmt":"2021-10-25T01:34:15","guid":{"rendered":"https:\/\/dc540.org\/xxx\/?p=1352"},"modified":"2021-10-24T21:34:18","modified_gmt":"2021-10-25T01:34:18","slug":"self-hosted-password-manager-round-up","status":"publish","type":"post","link":"https:\/\/dc540.org\/xxx\/2021\/10\/self-hosted-password-manager-round-up\/","title":{"rendered":"Self-hosted Password Manager Round-up"},"content":{"rendered":"\n

Haven’t you ever set up a network for a specific project and wanted a simple way to manage passwords within the project network while sharing them between the project participants?<\/p>\n\n\n\n

Don’t you hate\/mistrust the cloud? <\/p>\n\n\n\n

For this project, I did a quick rundown on a few available self-hosted password managers that can live inside a network enclave without involving the cloud.<\/p>\n\n\n\n

  1. PASSBOLT<\/li><\/ol>\n\n\n\n

    I wanted Passbolt to work. Even after I found out the installer<\/em>* isn’t available beyond CentOS 7 and won’t run under Rocky. Seriously, who uses a closed installer anymore?<\/p>\n\n\n\n

    So i built a C7 VM and let her rip. Flawless install, got all the way to the point of logging in, and then?<\/p>\n\n\n\n

    Fucking hell. It REQUIRES<\/em> a BROWSER EXTENSION<\/em> to browse the site. That’s a lot of trust you’re asking me to extend. It also requires an email address to validate users. This seems more like a cloud offering hastily made into a self-hosted offering. These are not features I want or need in a closed, self-hosted password manager. <\/p>\n\n\n\n

    2. BITWARDEN<\/p>\n\n\n\n

    I wanted to disqualify this one simply for deploying it in Docker. If you know me at all, you know I f’n HATE Docker. And the first set of instructions I found completely validated my hate.<\/p>\n\n\n\n

    But then I found this. Specifically happens to be for the exact platform I’m working with. https:\/\/computingforgeeks.com\/running-bitwarden-password-manager-using-docker-container\/<\/p>\n\n\n\n

    Other than dealing with SELinux (either by disabling it or by poking holes in it) and using a different cert mechanism than those described, it was flawless, and I had a Bitwarden instance complete in about an hour.<\/p>\n\n\n\n

    3. Anything file-based<\/p>\n\n\n\n

    Immediate automatic disqualification for being file-based. No matter how you share them, sharing them never works out.<\/p>\n\n\n\n

    4. Integrations<\/p>\n\n\n\n

    I noticed that NextCloud has a password manager app available for it. So that’s another valid option if it turns out we don’t like Bitwarden.<\/p>\n\n\n\n

    P.S. I still hate Docker.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Haven’t you ever set up a network for a specific project and wanted a simple way to manage passwords within the project network while sharing them between the project participants? … <\/p>\n

    Continue reading “Self-hosted Password Manager Round-up”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1353,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[32,75],"tags":[],"class_list":["post-1352","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-professional-development","category-reviews"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/dc540.org\/xxx\/wp-content\/uploads\/2021\/10\/bitwarden.png","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/posts\/1352","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/comments?post=1352"}],"version-history":[{"count":1,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/posts\/1352\/revisions"}],"predecessor-version":[{"id":1354,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/posts\/1352\/revisions\/1354"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/media\/1353"}],"wp:attachment":[{"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/media?parent=1352"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/categories?post=1352"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dc540.org\/xxx\/wp-json\/wp\/v2\/tags?post=1352"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}