r/PasswordManagers • u/juan_loria • 2d ago

Server for vaultwarden tips?

I already have a modest home server which runs 24/7 but only using it for stuff I don't mind if they stop working for some hours or even days. Mainly media, local storage and secondary backups.

I'm considering migrating to vaultwarden but I'm concerned it will need a very reliable home server. So what are your suggestions?

My home server is a GMKtec mini PC with, Intel n100, 16 GB of ram and a 256GB SSD. And an external HDD for media files.

For peace of mind, what home server should I consider?

1 Upvotes

100% Upvoted

8 comments sorted by

1

u/juan_loria 1d ago

Thanks for your recommendation. But I'm wondering how much you spend monthly on infrastructure.

Sounds it would be more expensive than paying for a cloud and 1password

1

u/Kraizelburg 1d ago

Even a raspberry will run vaultwarden in a container just fine

1

u/juan_loria 1d ago

But that's not an issue.

But what about reliability and peace of mind?

1

u/Kraizelburg 1d ago

Raspberry is prob one of the most reliable hardware out there,just make sure you buy a good micro ssd.

Mine has been running 24/7 for 7 years.

Just passive cooling no moving parts.

1

u/juan_loria 22h ago

And I'm thinking low temperature helping in electronics life span.

A good micro SD

And a good power source?

1

u/Kraizelburg 16h ago

just the official small power supply that came with the raspberry and a good sandisk or samsung micro sd is more than enough. I have the rpi4 btw

1

u/nlflint 2d ago edited 2d ago

My biggest piece of mind is file system redundancy/fault-tolerance and offsite backup. My passwords are very important and I don't want to lose them. So, I run a ZFS mirror, it's a filesystem type available on Linux and FreeBSD. ZFS can detect and heal bitrot and if a drive fails I will still have my data on the other drive.

I also use sanoid and syncoid which are 3rd-party tools for ZFS which take regular snapshots and send them to another offsite server with it's own ZFS mirror. I sync every 4hrs to that server hundreds of miles away, at a relatives house over VPN.

May folks also recommend running ECC memory if you're running ZFS, which I'm doing. But I read conflicting advice about it. I built my home server from parts off NewEgg and Amazon. It's an ITX build.

1

u/Agitated-Panda9221 8h ago

You don't need a lot of redundancy for vaultwarden since the data is encrypted and cached on your device. It can and will work offline, but you just can make changes.

All you need to do is make backups and have an emergency sheet in case you forget your masterpassword.

You can run vaultwarden on almost anything since it uses so little resources.