vaultwarden helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install vaultwarden bjw-s/app-template -f values.yaml

Top Repositories (3 out of 18)

See examples from other people.

NameRepoStarsVersionTimestamp
vaultwardenauricom/home-ops1252.3.02 days ago
vaultwardenDiaoul/home-ops552.3.08 days ago
vaultwardentoboshii/home-ops2410.2.210 months ago

Values

See the most popular values for this chart:

KeyTypes
ingress.main.enabled (17)
true
boolean
ingress.main.hosts[].host (16)
vault.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (16)
/
string
ingress.main.hosts[].paths[].service.port (13)
80
80
3012
string, number
ingress.main.hosts[].paths[].service.name (7)
main
string
ingress.main.hosts[].paths[].pathType (12)
Prefix
Prefix
Prefix
string
ingress.main.hosts[].paths[].servicePort (1)
3012
number
ingress.main.tls[].hosts[] (16)
- vault.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (7)
vaultwarden-tls
string
ingress.main.ingressClassName (8)
nginx
string
ingress.main.className (6)
nginx
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (5)
letsencrypt-production
string
ingress.main.annotations."hajimari.io/icon" (4)
shield-key
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (3)
dyn.${SECRET_DOMAIN}
string
ingress.main.annotations."external-dns.home.arpa/enabled" (3)
true
string
ingress.main.annotations.external-dns/is-public (2)
true
string
ingress.main.annotations."hajimari.io/enable" (2)
true
string
ingress.main.annotations."cert-manager.home.arpa/enabled" (1)
true
string
ingress.main.annotations."gethomepage.dev/description" (1)
Open Source Password Manager.
string
ingress.main.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.main.annotations."gethomepage.dev/group" (1)
Security
string
ingress.main.annotations."gethomepage.dev/icon" (1)
vaultwarden
string
ingress.main.annotations."gethomepage.dev/name" (1)
Vaultwarden
string
ingress.main.annotations."kubernetes.io/ingress.class" (1)
nginx
string
ingress.main.annotations."theme.home.arpa/enabled" (1)
true
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.main.anotations."external-dns.alpha.kubernetes.io/enabled" (1)
true
string
ingress.main.anotations."external-dns.alpha.kubernetes.io/target" (1)
services.${SECRET_DOMAIN}.
string
ingress.main.anotations."hajimari.io/icon" (1)
mdi:lock
string
ingress.admin.enabled (4)
true
boolean
ingress.admin.hosts[].host (4)
vault.${SECRET_DOMAIN}
string
ingress.admin.hosts[].paths[].path (4)
/admin
string
ingress.admin.hosts[].paths[].pathType (3)
Prefix
string
ingress.admin.hosts[].paths[].service.name (1)
main
string
ingress.admin.hosts[].paths[].service.port (1)
http
string
ingress.admin.tls[].hosts[] (4)
- vault.${SECRET_DOMAIN}
string
ingress.admin.tls[].secretName (3)
vaultwarden-tls
string
ingress.admin.ingressClassName (3)
traefik
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/whitelist-source-range" (2)
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16
string
ingress.admin.annotations."cert-manager.home.arpa/enabled" (1)
true
string
ingress.admin.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.admin.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (1)
403,404,500,501,502,503
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
service.main.ports.http.port (17)
80
number
service.main.ports.websocket.enabled (10)
true
boolean
service.main.ports.websocket.port (10)
3012
number
persistence.config.enabled (11)
true
boolean
persistence.config.existingClaim (10)
vaultwarden-config-v1
string
persistence.config.globalMounts[].path (2)
/data
string
persistence.config.mountPath (2)
/config
string
persistence.config.path (1)
/mnt/raid/nfs/vaultwarden
string
persistence.config.retain (1)
true
boolean
persistence.config.server (1)
${NFS_HOST}
string
persistence.config.storageClass (1)
longhorn
string
persistence.config.type (1)
nfs
string
persistence.data.enabled (3)
true
boolean
persistence.data.existingClaim (2)
vaultwarden-data
string
persistence.data.accessMode (1)
ReadWriteOnce
string
persistence.data.globalMounts[].path (1)
/data
string
persistence.data.size (1)
1Gi
string
persistence.data.type (1)
pvc
string
image.repository (10)
vaultwarden/server
string
image.tag (10)
1.30.1
string
image.pullPolicy (2)
IfNotPresent
string
controllers.main.containers.main.env.DOMAIN (8)
https://vaultwarden.${DOMAIN}
string
controllers.main.containers.main.env.SIGNUPS_ALLOWED (8)
false
boolean, string
controllers.main.containers.main.env.DATA_FOLDER (7)
config
string
controllers.main.containers.main.env.SMTP_PORT (7)
587
number
controllers.main.containers.main.env.TZ (7)
${TIMEZONE}
string
controllers.main.containers.main.env.SMTP_SECURITY (6)
off
string
controllers.main.containers.main.env.WEBSOCKET_ENABLED (6)
true
boolean, string
controllers.main.containers.main.env.SMTP_HOST.valueFrom.secretKeyRef.key (1)
SMTP_HOST
string
controllers.main.containers.main.env.SMTP_HOST.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SMTP_HOST (5)
${ROUTER_IP}
string
controllers.main.containers.main.env.ATTACHMENTS_FOLDER (4)
data/attachments
string
controllers.main.containers.main.env.ICON_CACHE_FOLDER (4)
data/icon_cache
string
controllers.main.containers.main.env.SMTP_FROM.valueFrom.secretKeyRef.key (1)
SMTP_FROM
string
controllers.main.containers.main.env.SMTP_FROM.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SMTP_FROM (4)
admin@${DOMAIN}
string
controllers.main.containers.main.env.WEBSOCKET_ADDRESS (4)
0.0.0.0
string
controllers.main.containers.main.env.WEBSOCKET_PORT (4)
3012
number
controllers.main.containers.main.env.DISABLE_2FA_REMEMBER (2)
false
boolean
controllers.main.containers.main.env.DISABLE_ICON_DOWNLOAD (2)
false
boolean
controllers.main.containers.main.env.EMERGENCY_ACCESS_ALLOWED (2)
true
boolean
controllers.main.containers.main.env.INVITATIONS_ALLOWED (2)
true
boolean
controllers.main.containers.main.env.PASSWORD_HINTS_ALLOWED (2)
false
boolean
controllers.main.containers.main.env.ROCKET_PORT (2)
8080
number
controllers.main.containers.main.env.SENDS_ALLOWED (2)
true
boolean
controllers.main.containers.main.env.SENDS_FOLDER (2)
config/sends
string
controllers.main.containers.main.env.SMTP_FROM_NAME.valueFrom.secretKeyRef.key (1)
SMTP_FROM
string
controllers.main.containers.main.env.SMTP_FROM_NAME.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SMTP_FROM_NAME (2)
vaultwarden
string
controllers.main.containers.main.env.SMTP_SSL (2)
true
string, boolean
controllers.main.containers.main.env.ADMIN_TOKEN (1)
${VAULTWARDEN_ADMIN_TOKEN}
string
controllers.main.containers.main.env.EMAIL_ATTEMPTS_LIMIT (1)
3
number
controllers.main.containers.main.env.INVITATION_ORG_NAME.valueFrom.secretKeyRef.key (1)
INVITATION_ORG_NAME
string
controllers.main.containers.main.env.INVITATION_ORG_NAME.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.INVITATION_ORG_NAME (1)
${DOMAIN}
string
controllers.main.containers.main.env.IP_HEADER (1)
X-Envoy-External-Address
string
controllers.main.containers.main.env.ORG_CREATION_USERS.valueFrom.secretKeyRef.key (1)
ORG_CREATION_USERS
string
controllers.main.containers.main.env.ORG_CREATION_USERS.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SHOW_PASSWORD_HINT (1)
false
string
controllers.main.containers.main.env.SIGNUPS_DOMAINS_WHITELIST.valueFrom.secretKeyRef.key (1)
SIGNUPS_DOMAINS_WHITELIST
string
controllers.main.containers.main.env.SIGNUPS_DOMAINS_WHITELIST.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SMTP_PASSWORD.valueFrom.secretKeyRef.key (1)
SMTP_PASSWORD
string
controllers.main.containers.main.env.SMTP_PASSWORD.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.SMTP_USERNAME.valueFrom.secretKeyRef.key (1)
SMTP_USERNAME
string
controllers.main.containers.main.env.SMTP_USERNAME.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.TRASH_AUTO_DELETE_DAYS (1)
30
string
controllers.main.containers.main.env.YUBICO_CLIENT_ID.valueFrom.secretKeyRef.key (1)
YUBICO_CLIENT_ID
string
controllers.main.containers.main.env.YUBICO_CLIENT_ID.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.YUBICO_CLIENT_ID (1)
${VAULTWARDEN_YUBICO_CLIENT_ID}
string
controllers.main.containers.main.env.YUBICO_SECRET_KEY.valueFrom.secretKeyRef.key (1)
YUBICO_SECRET_KEY
string
controllers.main.containers.main.env.YUBICO_SECRET_KEY.valueFrom.secretKeyRef.name (1)
vaultwarden-env
string
controllers.main.containers.main.env.YUBICO_SECRET_KEY (1)
${VAULTWARDEN_YUBICO_SECRET_KEY}
string
controllers.main.containers.main.image.repository (8)
ghcr.io/dani-garcia/vaultwarden
string
controllers.main.containers.main.image.tag (8)
1.30.1
string
controllers.main.containers.main.envFrom[].secretRef.name (7)
vaultwarden-secret
string
controllers.main.containers.main.resources.limits.memory (6)
2Gi
string
controllers.main.containers.main.resources.limits.cpu (1)
200m
string
controllers.main.containers.main.resources.requests.cpu (6)
100m
string
controllers.main.containers.main.resources.requests.memory (6)
200Mi
string
controllers.main.containers.main.probes.liveness.custom (1)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.readiness.custom (1)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.main.annotations."reloader.stakater.com/auto" (4)
true
string
controllers.main.annotations."secret.reloader.stakater.com/reload" (1)
vaultwarden-secret
string
controllers.main.type (3)
statefulset
string
controllers.main.initContainers.init-db.envFrom[].secretRef.name (2)
vaultwarden-secret
string
controllers.main.initContainers.init-db.image.repository (2)
ghcr.io/auricom/postgres-init
string
controllers.main.initContainers.init-db.image.tag (2)
15.5@sha256:9b1b80d8101d3f1c73ef13b90dff2ab3bc855bd79ebcd334cba57db391ce6db0
string
controllers.main.initContainers.init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.main.pod.securityContext.fsGroup (2)
2700
number
controllers.main.pod.securityContext.fsGroupChangePolicy (2)
OnRootMismatch
string
controllers.main.pod.securityContext.runAsGroup (2)
2700
number
controllers.main.pod.securityContext.runAsUser (2)
2700
number
controllers.main.pod.securityContext.supplementalGroups[] (1)
- "100"
number
controllers.main.statefulset.volumeClaimTemplates[].accessMode (2)
ReadWriteOnce
string
controllers.main.statefulset.volumeClaimTemplates[].globalMounts[].path (2)
/data
string
controllers.main.statefulset.volumeClaimTemplates[].name (2)
config
string
controllers.main.statefulset.volumeClaimTemplates[].size (2)
10Gi
string
controllers.main.statefulset.volumeClaimTemplates[].storageClass (2)
rook-ceph-block
string
controllers.main.replicas (1)
1
number
controllers.main.strategy (1)
Recreate
string
env.DATA_FOLDER (7)
config
string
env.DOMAIN (7)
https://vault.${SECRET_DOMAIN}
string
env.SIGNUPS_ALLOWED (7)
false
boolean, string
env.WEBSOCKET_ADDRESS (6)
0.0.0.0
string
env.WEBSOCKET_ENABLED (6)
true
boolean
env.SMTP_FROM_NAME (5)
Vaultwarden
string
env.SMTP_PORT (5)
587
number
env.SMTP_SSL (5)
true
string, boolean
env.TZ (5)
${TIMEZONE}
string
env.WEBSOCKET_PORT (5)
3012
number
env.SMTP_HOST (4)
smtp-relay.network.svc.cluster.local
string
env.DATABASE_URL.valueFrom.secretKeyRef.key (3)
POSTGRES_URL
string
env.DATABASE_URL.valueFrom.secretKeyRef.name (3)
vaultwarden
string
env.DATABASE_URL (1)
postgres://$(A_DATABASE_USERNAME):$(A_DATABASE_PASSWORD)@pg-vaultwarden-rw:5432/vaultwarden
string
env.SMTP_FROM (3)
vault@${EXTERNAL_DOMAIN}
string
env.ATTACHMENTS_FOLDER (2)
config/attachments
string
env.ICON_CACHE_FOLDER (2)
config/icon_cache
string
env.A_DATABASE_PASSWORD.valueFrom.secretKeyRef.key (1)
password
string
env.A_DATABASE_PASSWORD.valueFrom.secretKeyRef.name (1)
pg-vaultwarden-app
string
env.A_DATABASE_USERNAME.valueFrom.secretKeyRef.key (1)
username
string
env.A_DATABASE_USERNAME.valueFrom.secretKeyRef.name (1)
pg-vaultwarden-app
string
env.ADMIN_TOKEN.valueFrom.secretKeyRef.key (1)
ADMIN_TOKEN
string
env.ADMIN_TOKEN.valueFrom.secretKeyRef.name (1)
vaultwarden
string
env.ADMIN_TOKEN (1)
${SECRET_VAULTWARDEN_ADMIN_TOKEN}
string
env.DISABLE_2FA_REMEMBER (1)
false
boolean
env.DISABLE_ICON_DOWNLOAD (1)
false
boolean
env.EMERGENCY_ACCESS_ALLOWED (1)
true
boolean
env.INVITATIONS_ALLOWED (1)
true
boolean
env.PASSWORD_HINTS_ALLOWED (1)
false
boolean
env.ROCKET_PORT (1)
8080
number
env.SENDS_ALLOWED (1)
true
boolean
env.SENDS_FOLDER (1)
config/sends
string
env.SHOW_PASSWORD_HINT (1)
false
string
env.SMTP_EXPLICIT_TLS (1)
true
string
env.SMTP_PASSWORD (1)
${SECRET_SENDGRID_API_KEY}
string
env.SMTP_SECURITY (1)
off
string
env.SMTP_USERNAME (1)
apikey
string
envFrom[].secretRef.name (5)
vaultwarden-secret
string
resources.requests.cpu (4)
5m
string
resources.requests.memory (4)
64Mi
string
resources.limits.memory (3)
164Mi
string
controller.annotations."reloader.stakater.com/auto" (3)
true
string
controller.type (3)
statefulset
string
defaultPodOptions.securityContext.fsGroup (3)
568
number
defaultPodOptions.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (3)
568
number
defaultPodOptions.securityContext.runAsUser (3)
568
number
podSecurityContext.fsGroup (3)
568
number
podSecurityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
podSecurityContext.runAsGroup (3)
568
number
podSecurityContext.runAsUser (3)
568
number
podSecurityContext.supplementalGroups[] (1)
- "100"
number
initContainers.01-init-db.image (2)
ghcr.io/onedr0p/postgres-initdb:14.8@sha256:0141cf427c47f2d534711a3f9e8c5f9008bc6b585463ccd9288cf0f027e20deb
string
initContainers.01-init-db.env[].name (1)
POSTGRES_HOST
POSTGRES_DB
POSTGRES_SUPER_PASS
POSTGRES_USER
POSTGRES_PASS
string
initContainers.01-init-db.env[].value (1)
${POSTGRES_RW_URL}
vaultwarden
string
initContainers.01-init-db.env[].valueFrom.secretKeyRef.key (1)
password
POSTGRES_USER
POSTGRES_PASS
string
initContainers.01-init-db.env[].valueFrom.secretKeyRef.name (1)
postgres-superuser
vaultwarden
vaultwarden
string
initContainers.01-init-db.envFrom[].secretRef.name (1)
vaultwarden-secret
string
initContainers.01-init-db.imagePullPolicy (1)
IfNotPresent
string
initContainers.init-db.envFrom[].secretRef.name (1)
vaultwarden-secret
string
initContainers.init-db.image (1)
ghcr.io/onedr0p/postgres-init:16.1
string
strategy.type (2)
Recreate
string
volumeClaimTemplates[].accessMode (2)
ReadWriteOnce
string
volumeClaimTemplates[].mountPath (2)
/config
string
volumeClaimTemplates[].name (2)
config
string
volumeClaimTemplates[].size (2)
15Gi
string
volumeClaimTemplates[].storageClass (2)
ceph-block
string
global.nameOverride (1)
vaultwarden
string
podAnnotations."secret.reloader.stakater.com/reload" (1)
vaultwarden
string
upgradeStrategy (1)
recreate
string