Docker部署自建Bitwarden密码管理器 | Nginx

# 进入用户目录，新建应用目录
cd ~
mkdir bitwarden
 
# 编辑compose文件(参考下文)
nano ~/bitwarden/docker-compose.yml

version: '3.9'
services:
    srprolin:
        image: 'vaultwarden/server:1.35.4'
        ports:
            - '3012:3012'
            - '8080:80'
        restart: unless-stopped
        volumes:
            - '/vw-data/:/data/'
        container_name: vaultwarden
        environment:
            - WEBSOCKET_ENABLED=true

# 进入应用目录
cd ~/bitwarden
 
# 启动容器
sudo docker compose up -d

# 安装certbot
apt-get install -y certbot
apt-get install -y python3-certbot-nginx
 
# 申请Let's Encrypt的免费SSL证书
# 将<your-domain>改为已在DNS处解析过的域名
sudo certbot certonly --nginx -d <your-domain>
 
# 安装启动Nginx
apt-get update && apt-get install -y nginx
systemctl enable nginx && systemctl start nginx
 
# 编辑配置文件（参考下文）
nano /etc/nginx/sites-available/default
 
# 启用软链接
ln -s /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
 
# 测试文件格式
nginx -t
 
# 重载Nginx服务
systemctl reload nginx

# ==================== Bitwarden - HTTP ====================
server {
    listen 80;
    server_name <your-domain>;
 
    # HTTP自动跳转HTTPS
    return 301 https://$host$request_uri;
}
 
# ==================== Bitwarden - HTTPS ====================
server {
    listen 443 ssl;
    server_name <your-domain>;
 
    ssl_certificate /etc/letsencrypt/live/<your-domain>/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/<your-domain>/privkey.pem;
 
    location /notifications/hub {
        proxy_pass http://172.17.0.1:3012;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400s;
        proxy_send_timeout 86400s;
    }
 
    location / {
        proxy_pass http://172.17.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}