committed by
							
								 
								
							
						
					
				
				 2 changed files with 167 additions and 64 deletions
			
			
		| @ -0,0 +1,69 @@ | |||
| ## How to compile bitwarden_rs | |||
| Install `rust nightly`, in Windows the recommended way is through `rustup`. | |||
| 
 | |||
| Install the `openssl` library, in Windows the best option is Microsoft's `vcpkg`, | |||
| on other systems use their respective package managers. | |||
| 
 | |||
| Then run: | |||
| ```sh | |||
| cargo run | |||
| # or | |||
| cargo build | |||
| ``` | |||
| 
 | |||
| ## How to install the web-vault locally | |||
| If you're using docker image, you can just update `VAULT_VERSION` variable in Dockerfile and rebuild the image. | |||
| 
 | |||
| Install `node.js` and either `yarn` or `npm` (usually included with node) | |||
| 
 | |||
| Clone the web-vault outside the project: | |||
| ``` | |||
| git clone https://github.com/bitwarden/web.git web-vault | |||
| ``` | |||
| 
 | |||
| Modify `web-vault/settings.Production.json` to look like this: | |||
| ```json | |||
| { | |||
|   "appSettings": { | |||
|     "apiUri": "/api", | |||
|     "identityUri": "/identity", | |||
|     "iconsUri": "/icons", | |||
|     "stripeKey": "", | |||
|     "braintreeKey": "" | |||
|   } | |||
| } | |||
| ``` | |||
| 
 | |||
| Then, run the following from the `web-vault` dir: | |||
| ```sh | |||
| # With yarn (recommended) | |||
| yarn | |||
| yarn gulp dist:selfHosted | |||
| 
 | |||
| # With npm | |||
| npm install | |||
| npx gulp dist:selfHosted | |||
| ``` | |||
| 
 | |||
| Finally copy the contents of the `web-vault/dist` folder into the `bitwarden_rs/web-vault` folder. | |||
| 
 | |||
| ## How to recreate database schemas | |||
| Install diesel-cli with cargo: | |||
| ```sh | |||
| cargo install diesel_cli --no-default-features --features sqlite-bundled # Or use only sqlite to use the system version | |||
| ``` | |||
| 
 | |||
| Make sure that the correct path to the database is in the `.env` file. | |||
| 
 | |||
| If you want to modify the schemas, create a new migration with: | |||
| ``` | |||
| diesel migration generate <name> | |||
| ``` | |||
| 
 | |||
| Modify the *.sql files, making sure that any changes are reverted in the down.sql file. | |||
| 
 | |||
| Apply the migrations and save the generated schemas as follows: | |||
| ``` | |||
| diesel migration redo | |||
| diesel print-schema > src/db/schema.rs | |||
| ``` | |||
| @ -1,97 +1,131 @@ | |||
| ## Easy setup (Docker) | |||
| Install Docker to your system and then, from the project root, run: | |||
| ```sh | |||
| # Build the docker image: | |||
| docker build -t dani/bitwarden_rs . | |||
| ## Docker image usage | |||
| 
 | |||
| ### Starting a container | |||
| 
 | |||
| # Run the docker image with a docker volume: | |||
| docker volume create bw_data | |||
| docker run --name bitwarden_rs -t --init --rm --mount source=bw_data,target=/data -p 8000:80 dani/bitwarden_rs | |||
| The persistent data is stored under /data inside the container, so the only requirement for persistent deployment using Docker is to mount persistent volume at the path: | |||
| 
 | |||
| ``` | |||
| docker run -d --name bitwarden -v /bw-data/:/data/ -p 80:80 mprasil/bitwarden:latest | |||
| ``` | |||
| 
 | |||
| #### Other possible Docker options | |||
| This will preserve any persistent data under `/bw-data/`, you can adapt the path to whatever suits you. | |||
| 
 | |||
| To run the container in the background, add the `-d` parameter. | |||
| The service will be exposed on port 80. | |||
| 
 | |||
| To check the logs when in background, run `docker logs bitwarden_rs` | |||
| ### Updating the bitwarden image | |||
| 
 | |||
| To stop the container in background, run `docker stop bitwarden_rs` | |||
| Updating is straightforward, you just make sure to preserve the mounted volume. If you used the bind-mounted path as in the example above, you just need to `pull` the latest image, `stop` and `rm` the current container and then start a new one the same way as before: | |||
| 
 | |||
| To make sure the container is restarted automatically, add the `--restart unless-stopped` parameter | |||
| ```sh | |||
| # Pull the latest version | |||
| docker pull mprasil/bitwarden:latest | |||
| 
 | |||
| # Stop and remove the old container | |||
| docker stop bitwarden | |||
| docker rm bitwarden | |||
| 
 | |||
| To run the image with a host bind, change the `--mount` parameter to: | |||
| # Start new container with the data mounted | |||
| docker run -d --name bitwarden -v /bw-data/:/data/ -p 80:80 mprasil/bitwarden:latest | |||
| ``` | |||
| --mount type=bind,source=<absolute_path>,target=/data | |||
| 
 | |||
| In case you didn't bind mount the volume for persistent data, you need an intermediate step where you preserve the data with an intermediate container: | |||
| 
 | |||
| ```sh | |||
| # Pull the latest version | |||
| docker pull mprasil/bitwarden:latest | |||
| 
 | |||
| # Create intermediate container to preserve data | |||
| docker run --volumes-from bitwarden --name bitwarden_data busybox true | |||
| 
 | |||
| # Stop and remove the old container | |||
| docker stop bitwarden | |||
| docker rm bitwarden | |||
| 
 | |||
| # Start new container with the data mounted | |||
| docker run -d --volumes-from bitwarden_data --name bitwarden -p 80:80 mprasil/bitwarden:latest | |||
| 
 | |||
| # Optionally remove the intermediate container | |||
| docker rm bitwarden_data | |||
| 
 | |||
| # Alternatively you can keep data container around for future updates in which case you can skip last step. | |||
| ``` | |||
| Where <absolute_path> is an absolute path in the hosts file system (e.g. C:\bitwarden\data) | |||
| 
 | |||
| ## Configuring bitwarden service | |||
| 
 | |||
| ## How to compile bitwarden_rs | |||
| Install `rust nightly`, in Windows the recommended way is through `rustup`. | |||
| ### Changing persistent data location | |||
| 
 | |||
| Install the `openssl` library, in Windows the best option is Microsoft's `vcpkg`, | |||
| on other systems use their respective package managers. | |||
| #### /data prefix: | |||
| 
 | |||
| By default all persistent data is saved under `/data`, you can override this path by setting the `DATA_FOLDER` env variable: | |||
| 
 | |||
| Then run: | |||
| ```sh | |||
| cargo run | |||
| # or | |||
| cargo build | |||
| docker run -d --name bitwarden \ | |||
|   -e DATA_FOLDER=/persistent \ | |||
|   -v /bw-data/:/persistent/ \ | |||
|   -p 80:80 \ | |||
|   mprasil/bitwarden:latest | |||
| ``` | |||
| 
 | |||
| ## How to install the web-vault locally | |||
| If you're using docker image, you can just update `VAULT_VERSION` variable in Dockerfile and rebuild the image. | |||
| Notice, that you need to adapt your volume mount accordingly. | |||
| 
 | |||
| Install `node.js` and either `yarn` or `npm` (usually included with node) | |||
| #### database name and location | |||
| 
 | |||
| Clone the web-vault outside the project: | |||
| ``` | |||
| git clone https://github.com/bitwarden/web.git web-vault | |||
| ``` | |||
| Default is `$DATA_FOLDER/db.sqlite3`, you can change the path specifically for database using `DATABASE_URL` variable: | |||
| 
 | |||
| Modify `web-vault/settings.Production.json` to look like this: | |||
| ```json | |||
| { | |||
|   "appSettings": { | |||
|     "apiUri": "/api", | |||
|     "identityUri": "/identity", | |||
|     "iconsUri": "/icons", | |||
|     "stripeKey": "", | |||
|     "braintreeKey": "" | |||
|   } | |||
| } | |||
| ```sh | |||
| docker run -d --name bitwarden \ | |||
|   -e DATABASE_URL=/database/bitwarden.sqlite3 \ | |||
|   -v /bw-data/:/data/ \ | |||
|   -v /bw-database/:/database/ \ | |||
|   -p 80:80 \ | |||
|   mprasil/bitwarden:latest | |||
| ``` | |||
| 
 | |||
| Then, run the following from the `web-vault` dir: | |||
| ```sh | |||
| # With yarn (recommended) | |||
| yarn | |||
| yarn gulp dist:selfHosted | |||
| Note, that you need to remember to mount the volume for both database and other persistent data if they are different. | |||
| 
 | |||
| # With npm | |||
| npm install | |||
| npx gulp dist:selfHosted | |||
| ``` | |||
| #### attachments location | |||
| 
 | |||
| Finally copy the contents of the `web-vault/dist` folder into the `bitwarden_rs/web-vault` folder. | |||
| Default is `$DATA_FOLDER/attachments`, you can change the path using `ATTACHMENTS_FOLDER` variable: | |||
| 
 | |||
| ## How to recreate database schemas | |||
| Install diesel-cli with cargo: | |||
| ```sh | |||
| cargo install diesel_cli --no-default-features --features sqlite-bundled # Or use only sqlite to use the system version | |||
| docker run -d --name bitwarden \ | |||
|   -e ATTACHMENTS_FOLDER=/attachments \ | |||
|   -v /bw-data/:/data/ \ | |||
|   -v /bw-attachments/:/attachments/ \ | |||
|   -p 80:80 \ | |||
|   mprasil/bitwarden:latest | |||
| ``` | |||
| 
 | |||
| Make sure that the correct path to the database is in the `.env` file. | |||
| Note, that you need to remember to mount the volume for both attachments and other persistent data if they are different. | |||
| 
 | |||
| If you want to modify the schemas, create a new migration with: | |||
| ``` | |||
| diesel migration generate <name> | |||
| ``` | |||
| #### icons cache | |||
| 
 | |||
| Modify the *.sql files, making sure that any changes are reverted in the down.sql file. | |||
| Default is `$DATA_FOLDER/icon_cache`, you can change the path using `ICON_CACHE_FOLDER` variable: | |||
| 
 | |||
| Apply the migrations and save the generated schemas as follows: | |||
| ```sh | |||
| docker run -d --name bitwarden \ | |||
|   -e ICON_CACHE_FOLDER=/icon_cache \ | |||
|   -v /bw-data/:/data/ \ | |||
|   -v /icon_cache/ \ | |||
|   -p 80:80 \ | |||
|   mprasil/bitwarden:latest | |||
| ``` | |||
| diesel migration redo | |||
| diesel print-schema > src/db/schema.rs | |||
| 
 | |||
| Note, that in the above example we don't mount the volume locally, which means it won't be persisted during the upgrade unless you use intermediate data container using `--volumes-from`. This will impact performance as bitwarden will have to re-dowload the icons on restart, but might save you from having stale icons in cache as they are not automatically cleaned. | |||
| 
 | |||
| ### Other configuration | |||
| 
 | |||
| Though this is unlikely to be required in small deployment, you can fine-tune some other settings like number of workers using environment variables that are processed by [Rocket](https://rocket.rs), please see details in [documentation](https://rocket.rs/guide/configuration/#environment-variables). | |||
| 
 | |||
| ## Building your own image | |||
| 
 | |||
| Clone the repository, then from the root of the repository run: | |||
| 
 | |||
| ```sh | |||
| # Build the docker image: | |||
| docker build -t bitwarden_rs . | |||
| ``` | |||
| 
 | |||
| ## Building binary | |||
| 
 | |||
| For building binary outside the Docker environment and running it locally without docker, please see [build instructions](BUILD.md). | |||
					Loading…
					
					
				
		Reference in new issue