Live data from Hacker News

Vaultwarden: Unofficial Bitwarden compatible server written in Rust

github.com

1–10 of 124 posts

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#5
I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years.

Genuine question, in what scenario is the self hosting setup and maintenance worth it?

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#6
post #3

I've been self-hosting this for years now, works flawlessly.

Same, although in the end I figured I'll give BitWarden my money, as it's more than cheap enough.

My own "justification" is that while self-hosted is my main personal store, I maintain a paid but empty account with Bitwarden. Said empty account on their servers is to be the emergency access person for family members' personal official vaults. So, they get some money for a license out of me, without the server usage.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#7

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

Another reason for NOT self hosting: I want the passwords for my family to be available in the event something happens to me. The probability of Bitwarden being more resilient (at least mid-term) is much higher than any self hosting solution I would come up with.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#8

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

There really isn't any maintenance besides the occasional update. Setup was also effortless as I've got Caddy setup to reverse proxy containers in my network. I simply define what the subdomain should be for the container and where it can reach it and that's all there is to it.

I've got Vaultwarden setup on one of my servers via Docker and I've got nightly backups of my vault to Dropbox via docker-volume-backup[0], which works wonderfully.

I personally choose to self-host because I already have the infrastructure for it, so might as well put it to good use.

[0]: https://github.com/offen/docker-volume-backup

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#9
post #3

Earlier quoted context omitted.

Same, although in the end I figured I'll give BitWarden my money, as it's more than cheap enough.

My own "justification" is that while self-hosted is my main personal store, I maintain a paid but empty account with Bitwarden. Said empty account on their servers is to be the emergency access person for family members' personal official vaults. So, they get some money for a license out of me, without the server usage.

Ah nice, that's a good solution.

Re: Vaultwarden: Unofficial Bitwarden compatible server written in Rust

#10

I evaluated this for a small business but came to the conclusion that self hosting this security critical software would cost more in work hours for initial setup and maintenance than just paying the cloud fees for a few years. Genuine question, in what scenario is the self hosting setup and maintenance worth it?

>Genuine question, in what scenario is the self hosting setup and maintenance worth it?

Maybe if you're a huge org with a dedicated security team and so on, which could easily handle managing such service. I guess at a certain point it would bring cost savings at a scale in comparison to using Bitwarden, where it costs per team member or seat. Inhouse team has fixed costs in comparison.

Of course for smaller orgs or individuals there is little sense in hosting security software yourself. No way you're going to have enough time to manage the service and keep it secure, which is where almost all of such software's value is derived from.

Post reply on HN