安装bitwarden

docker pull vaultwarden/server:latest
docker run -d --restart=always --name vaultwarden \
-e WEBSOCKET_ENABLED=true \
-e SIGNUPS_ALLOWED=false \
-e INVITATIONS_ALLOWED=false \
-e DOMAIN=https://pass.wzh.kim \
-v /root/bitwarden/:/data/ \
-p 3011:80 \
-p 3012:3012 \
-e ADMIN_TOKEN='$argon2id$v=19$m=65540,t=3,p=4$cFUvK3h3WWpyNTZ6NmVDOTZBT2t5Y01oOEpvUmd1OGhscFRBejVkcFRpQT0$kIr7BUwSuyA81Un/coYXNXgJcRBKfy0mrP5BKWRc7Kc' \
vaultwarden/server:latest

ADMIN_TOKEN计算

echo -n "MySecretPassword" | argon2 "$(openssl rand -base64 32)" -e -id -k 65540 -t 3 -p 4

反代配置

#PROXY-START/
location ^~ /
{
    proxy_pass http://127.0.0.1:3011;
    proxy_set_header Host 127.0.0.1;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_http_version 1.1;
    # proxy_hide_header Upgrade;
}

location /notifications/hub
{
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_pass http://127.0.0.1:3011;
}
#PROXY-END/