vaultwarden helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s oci://ghcr.io/bjw-s/helm/
helm install vaultwarden bjw-s/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 11)

NameRepoStarsVersionTimestamp
vaultwardenDiaoul/home-ops713.7.32 months ago
vaultwardenvaskozl/home-infra923.7.32 months ago

Values

See the most popular values for this chart:

KeyTypes
controllers.vaultwarden.containers.app.image.repository (8)
vaultwarden/server
string
controllers.vaultwarden.containers.app.image.tag (8)
1.33.2@sha256:87edb99945da91bd7504ac1435495595af2e89ad2c7adc151ae5bf091ec8baf2
string
controllers.vaultwarden.containers.app.resources.limits.memory (8)
500Mi
string
controllers.vaultwarden.containers.app.resources.requests.cpu (8)
100m
string
controllers.vaultwarden.containers.app.resources.requests.memory (8)
200Mi
string
controllers.vaultwarden.containers.app.env.DOMAIN (7)
https://vault.${SECRET_DOMAIN}
string
controllers.vaultwarden.containers.app.env.SIGNUPS_ALLOWED (7)
false
boolean, string
controllers.vaultwarden.containers.app.env.TZ (7)
${TIMEZONE}
string
controllers.vaultwarden.containers.app.env.SMTP_SECURITY (6)
off
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ENABLED (6)
true
boolean, string
controllers.vaultwarden.containers.app.env.SMTP_FROM (5)
noreply@${SECRET_MAIL_DOMAIN}
string
controllers.vaultwarden.containers.app.env.SMTP_HOST (5)
smtp-relay.networking.svc.cluster.local.
string
controllers.vaultwarden.containers.app.env.SMTP_PORT (5)
25
number, string
controllers.vaultwarden.containers.app.env.ATTACHMENTS_FOLDER (4)
data/attachments
string
controllers.vaultwarden.containers.app.env.DATA_FOLDER (4)
data
string
controllers.vaultwarden.containers.app.env.ICON_CACHE_FOLDER (4)
data/icon_cache
string
controllers.vaultwarden.containers.app.env.SMTP_FROM_NAME (3)
Vaultwarden
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ADDRESS (3)
0.0.0.0
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_PORT (2)
3012
number
controllers.vaultwarden.containers.app.env.DISABLE_ICON_DOWNLOAD (1)
false
boolean
controllers.vaultwarden.containers.app.env.EMERGENCY_ACCESS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.INVITATION_ORG_NAME (1)
${SECRET_DOMAIN}
string
controllers.vaultwarden.containers.app.env.INVITATIONS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.SENDS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.SENDS_FOLDER (1)
data/sends
string
controllers.vaultwarden.containers.app.env.SHOW_PASSWORD_HINT (1)
false
boolean
controllers.vaultwarden.containers.app.env.SMTP_EXPLICIT_TLS (1)
true
string
controllers.vaultwarden.containers.app.env.SMTP_SSL (1)
true
string
controllers.vaultwarden.containers.app.env.TRASH_AUTO_DELETE_DAYS (1)
30
string
controllers.vaultwarden.containers.app.envFrom[].secretRef.name (7)
vaultwarden-secret
string
controllers.vaultwarden.containers.app.securityContext.allowPrivilegeEscalation (5)
false
boolean
controllers.vaultwarden.containers.app.securityContext.capabilities.drop[] (5)
- ALL
string
controllers.vaultwarden.containers.app.securityContext.readOnlyRootFilesystem (5)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.custom (1)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.port (1)
80
number
controllers.vaultwarden.containers.app.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.vaultwarden.containers.app.probes.liveness.spec.periodSeconds (1)
10
number
controllers.vaultwarden.containers.app.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.vaultwarden.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.custom (1)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.port (1)
80
number
controllers.vaultwarden.containers.app.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.vaultwarden.containers.app.probes.readiness.spec.periodSeconds (1)
10
number
controllers.vaultwarden.containers.app.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.vaultwarden.annotations."reloader.stakater.com/auto" (6)
true
string
controllers.vaultwarden.pod.securityContext.fsGroup (5)
1000
number
controllers.vaultwarden.pod.securityContext.fsGroupChangePolicy (5)
OnRootMismatch
string
controllers.vaultwarden.pod.securityContext.runAsGroup (5)
1000
number
controllers.vaultwarden.pod.securityContext.runAsUser (5)
1000
number
controllers.vaultwarden.pod.securityContext.runAsNonRoot (2)
true
boolean
controllers.vaultwarden.pod.securityContext.seccompProfile.type (2)
RuntimeDefault
string
controllers.vaultwarden.initContainers.init-db.envFrom[].secretRef.name (4)
vaultwarden-init-db
string
controllers.vaultwarden.initContainers.init-db.image.repository (4)
ghcr.io/home-operations/postgres-init
string
controllers.vaultwarden.initContainers.init-db.image.tag (4)
17
string, number
controllers.vaultwarden.initContainers.init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.vaultwarden.initContainers.01-init-db.envFrom[].secretRef.name (1)
vaultwarden-secret
string
controllers.vaultwarden.initContainers.01-init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.vaultwarden.initContainers.01-init-db.image.repository (1)
ghcr.io/onedr0p/postgres-init
string
controllers.vaultwarden.initContainers.01-init-db.image.tag (1)
17.4@sha256:43dd04e91e861cf912378bad987afa168fa4f13d05528304907ad0aa351195d6
string
controllers.vaultwarden.replicas (2)
1
number
controllers.vaultwarden.statefulset.podManagementPolicy (1)
Parallel
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].accessMode (1)
ReadWriteOnce
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].globalMounts[].path (1)
/data
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].name (1)
data
string
controllers.vaultwarden.statefulset.volumeClaimTemplates[].size (1)
1Mi
string
controllers.vaultwarden.strategy (1)
Recreate
string
controllers.vaultwarden.type (1)
statefulset
string
controllers.main.containers.main.env.DATA_FOLDER (2)
config
string
controllers.main.containers.main.env.DOMAIN (2)
https://vault.${SECRET_DOMAIN}
string
controllers.main.containers.main.env.SIGNUPS_ALLOWED (2)
false
boolean, string
controllers.main.containers.main.env.TZ (2)
${TIMEZONE}
string
controllers.main.containers.main.env.WEBSOCKET_ADDRESS (1)
0.0.0.0
string
controllers.main.containers.main.env.WEBSOCKET_ENABLED (1)
true
boolean
controllers.main.containers.main.env.WEBSOCKET_PORT (1)
3012
number
controllers.main.containers.main.envFrom[].secretRef.name (2)
vaultwarden
string
controllers.main.containers.main.image.repository (2)
docker.io/vaultwarden/server
string
controllers.main.containers.main.image.tag (2)
1.33.2-alpine@sha256:63cce7624f655f83ad5bab66ef62bc3e3327116b068704bfbbda5d0c1b3003be
string
controllers.main.containers.main.resources.limits.memory (2)
100Mi
string
controllers.main.containers.main.resources.requests.cpu (2)
15m
string
controllers.main.containers.main.resources.requests.memory (2)
100Mi
string
controllers.main.containers.main.probes.liveness.custom (1)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.readiness.custom (1)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.vaultwarden.env.DATA_FOLDER (1)
config
string
controllers.main.containers.vaultwarden.env.DOMAIN (1)
https://vault.${SECRET_DOMAIN}
string
controllers.main.containers.vaultwarden.env.SHOW_PASSWORD_HINT (1)
false
boolean
controllers.main.containers.vaultwarden.env.SIGNUPS_ALLOWED (1)
false
boolean
controllers.main.containers.vaultwarden.env.TZ (1)
${TIMEZONE}
string
controllers.main.containers.vaultwarden.env.WEBSOCKET_ADDRESS (1)
0.0.0.0
string
controllers.main.containers.vaultwarden.env.WEBSOCKET_ENABLED (1)
true
boolean
controllers.main.containers.vaultwarden.env.WEBSOCKET_PORT (1)
3012
number
controllers.main.containers.vaultwarden.envFrom[].secretRef.name (1)
vaultwarden-secret
string
controllers.main.containers.vaultwarden.image.pullPolicy (1)
IfNotPresent
string
controllers.main.containers.vaultwarden.image.repository (1)
vaultwarden/server
string
controllers.main.containers.vaultwarden.image.tag (1)
1.33.2
string
controllers.main.initContainers.init-db.envFrom[].secretRef.name (1)
vaultwarden-secrets
string
controllers.main.initContainers.init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.main.initContainers.init-db.image.tag (1)
rolling
string
controllers.main.pod.securityContext.fsGroup (1)
568
number
controllers.main.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.main.pod.securityContext.runAsGroup (1)
568
number
controllers.main.pod.securityContext.runAsUser (1)
568
number
controllers.main.pod.securityContext.supplementalGroups[] (1)
- "100"
number
ingress.app.hosts[].host (7)
vault.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (7)
/
string
ingress.app.hosts[].paths[].service.identifier (7)
app
string
ingress.app.hosts[].paths[].service.port (7)
http
string, number
ingress.app.className (6)
external
string
ingress.app.tls[].hosts[] (4)
- vault.${SECRET_DOMAIN}
string
ingress.app.tls[].secretName (3)
vaultwarden-production-tls
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (3)
external.${SECRET_DOMAIN}
string
ingress.app.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.app.annotations."hajimari.io/enable" (1)
true
string
ingress.app.annotations."hajimari.io/group" (1)
Authentication
string
ingress.app.annotations."hajimari.io/icon" (1)
cbi:vaultwarden
string
ingress.app.annotations."hajimari.io/name" (1)
Vaultwarden
string
ingress.app.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (1)
500,501,502,503,504,505,506,510
string
ingress.app.enabled (1)
true
boolean
ingress.admin.className (4)
external
string
ingress.admin.hosts[].host (4)
vaultwarden.${SECRET_DOMAIN}
string
ingress.admin.hosts[].paths[].path (4)
/admin
string
ingress.admin.hosts[].paths[].service.identifier (4)
app
string
ingress.admin.hosts[].paths[].service.port (4)
http
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (3)
500,501,502,503,504,505,506,510
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/whitelist-source-range" (2)
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16
string
ingress.admin.annotations."auth.home.arpa/enabled" (1)
true
string
ingress.admin.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.${SECRET_DOMAIN}
string
ingress.admin.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.admin.tls[].hosts[] (2)
- vaultwarden.${SECRET_DOMAIN}
string
ingress.admin.tls[].secretName (1)
vaultwarden-production-tls
string
ingress.admin.enabled (1)
true
boolean
ingress.main.annotations."gethomepage.dev/description" (2)
Open Source Password Manager.
string
ingress.main.annotations."gethomepage.dev/enabled" (2)
true
string
ingress.main.annotations."gethomepage.dev/group" (2)
Security
string
ingress.main.annotations."gethomepage.dev/icon" (2)
vaultwarden
string
ingress.main.annotations."gethomepage.dev/name" (2)
Vaultwarden
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.main.annotations.external-dns/is-public (1)
true
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.${SECRET_DOMAIN}
string
ingress.main.className (2)
external
string
ingress.main.hosts[].host (2)
vault.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (2)
/
/notifications/hub
/notifications/hub/negotiate
string
ingress.main.hosts[].paths[].pathType (2)
Prefix
Prefix
string
ingress.main.hosts[].paths[].service.identifier (2)
main
main
main
string
ingress.main.hosts[].paths[].service.port (2)
http
websocket
http
string
ingress.main.enabled (1)
true
boolean
ingress.main.tls[].hosts[] (1)
- vault.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (1)
vault-tls
string
ingress.vaultwarden.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.${SECRET_DOMAIN}
string
ingress.vaultwarden.annotations."hajimari.io/icon" (1)
simple-icons:vaultwarden
string
ingress.vaultwarden.className (1)
external
string
ingress.vaultwarden.hosts[].host (1)
vault.${SECRET_DOMAIN}
string
ingress.vaultwarden.hosts[].paths[].path (1)
/
/notifications/hub/negotiate
/notifications/hub
string
ingress.vaultwarden.hosts[].paths[].pathType (1)
Prefix
Prefix
Prefix
string
ingress.vaultwarden.hosts[].paths[].service.identifier (1)
vaultwarden
vaultwarden
vaultwarden
string
ingress.vaultwarden.hosts[].paths[].service.port (1)
http
http
websocket
string
ingress.vaultwarden.tls[].hosts[] (1)
- vault.${SECRET_DOMAIN}
string
service.app.controller (7)
vaultwarden
string
service.app.ports.http.port (7)
80
number
service.app.ports.websocket.enabled (2)
true
boolean
service.app.ports.websocket.port (2)
3012
number
service.main.controller (3)
main
string
service.main.ports.http.port (3)
80
number
service.main.ports.websocket.enabled (1)
true
boolean
service.main.ports.websocket.port (1)
3012
number
service.vaultwarden.controller (1)
main
string
service.vaultwarden.ports.http.port (1)
80
number
service.vaultwarden.ports.websocket.enabled (1)
true
boolean
service.vaultwarden.ports.websocket.port (1)
3012
number
persistence.config.existingClaim (5)
vaultwarden
string
persistence.config.globalMounts[].path (2)
/config
string
persistence.config.enabled (1)
true
boolean
persistence.data.existingClaim (5)
vaultwarden
string
persistence.data.enabled (2)
true
boolean
persistence.data.globalMounts[].path (2)
/data
string
persistence.data.globalMounts[].subPath (1)
vaultwarden
string
defaultPodOptions.annotations."secret.reloader.stakater.com/reload" (1)
vaultwarden
string
defaultPodOptions.securityContext.fsGroup (1)
568
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (1)
568
number
defaultPodOptions.securityContext.runAsUser (1)
568
number
podAnnotations."secret.reloader.stakater.com/reload" (1)
vaultwarden
string