vaultwarden helm

No introduction found. Create it?

More popular helm chart found

vaultwarden from bjw-s-labs is more popular with 13 repositories.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install vaultwarden app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 10)

NameRepoStarsVersionTimestamp
vaultwardendrag0n141/home-ops404.1.22 days ago
vaultwardenauricom/home-ops1923.7.35 days ago
vaultwardenishioni/homelab-ops1344.1.221 days ago

Values

See the most popular values for this chart:

KeyTypes
controllers.vaultwarden.containers.app.env.DOMAIN (9)
https://bitwarden.${SECRET_DOMAIN}
string
controllers.vaultwarden.containers.app.env.SIGNUPS_ALLOWED (8)
false
boolean, string
controllers.vaultwarden.containers.app.env.TZ (7)
${TIMEZONE}
string
controllers.vaultwarden.containers.app.env.SMTP_FROM (6)
${SECRET_SMTP_SENDER}
string
controllers.vaultwarden.containers.app.env.SMTP_SECURITY (6)
off
string
controllers.vaultwarden.containers.app.env.DATA_FOLDER (5)
data
string
controllers.vaultwarden.containers.app.env.SMTP_FROM_NAME (5)
Vaultwarden
string
controllers.vaultwarden.containers.app.env.SMTP_HOST (5)
smtp-relay.default.svc.cluster.local
string
controllers.vaultwarden.containers.app.env.SMTP_PORT (5)
2525
number, string
controllers.vaultwarden.containers.app.env.ATTACHMENTS_FOLDER (4)
data/attachments
string
controllers.vaultwarden.containers.app.env.ICON_CACHE_FOLDER (4)
data/icon_cache
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ENABLED (3)
true
string, boolean
controllers.vaultwarden.containers.app.env.PUSH_ENABLED (2)
true
boolean, string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ADDRESS (2)
0.0.0.0
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_PORT (2)
3012
number
controllers.vaultwarden.containers.app.env.ADMIN_TOKEN (1)
${admin_token}
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.secretKeyRef.key (1)
uri
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.secretKeyRef.name (1)
postgresql-app
string
controllers.vaultwarden.containers.app.env.DATABASE_URL (1)
postgresql://vaultwarden@vaultwarden-postgres-17-rw.security.svc:5432/vaultwarden?sslrootcert=/certs/postgres/serving/ca.crt&sslcert=/certs/postgres/user/tls.crt&sslkey=/certs/postgres/user/tls.key&sslmode=verify-full
string
controllers.vaultwarden.containers.app.env.DISABLE_ADMIN_TOKEN (1)
false
boolean
controllers.vaultwarden.containers.app.env.EMAIL_2FA_AUTO_FALLBACK (1)
true
string
controllers.vaultwarden.containers.app.env.EMAIL_CHANGE_ALLOWED (1)
true
string
controllers.vaultwarden.containers.app.env.EXPERIMENTAL_CLIENT_FEATURE_FLAGS (1)
ssh-key-vault-item,ssh-agent
string
controllers.vaultwarden.containers.app.env.INVITATION_ORG_NAME (1)
${PUBLIC_DOMAIN}
string
controllers.vaultwarden.containers.app.env.IP_HEADER (1)
X-Forwarded-For
string
controllers.vaultwarden.containers.app.env.LOGIN_RATELIMIT_MAX_BURST (1)
2
string
controllers.vaultwarden.containers.app.env.ORG_ATTACHMENT_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.env.PUSH_INSTALLATION_ID (1)
${push_installation_id}
string
controllers.vaultwarden.containers.app.env.PUSH_INSTALLATION_KEY (1)
${push_installation_key}
string
controllers.vaultwarden.containers.app.env.ROCKET_PORT (1)
8080
string
controllers.vaultwarden.containers.app.env.SENDS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.SHOW_PASSWORD_HINT (1)
false
boolean
controllers.vaultwarden.containers.app.env.SIGNUPS_VERIFY (1)
true
string
controllers.vaultwarden.containers.app.env.SMTP_TIMEOUT (1)
15
number
controllers.vaultwarden.containers.app.env.SSO_AUTHORITY (1)
https://auth.${PUBLIC_DOMAIN}/application/o/vaultwarden/
string
controllers.vaultwarden.containers.app.env.SSO_ENABLED (1)
true
string
controllers.vaultwarden.containers.app.env.SSO_ONLY (1)
true
string
controllers.vaultwarden.containers.app.env.SSO_SCOPES (1)
email profile offline_access
string
controllers.vaultwarden.containers.app.env.TIMEZONE (1)
${TZ}
string
controllers.vaultwarden.containers.app.env.TRASH_AUTO_DELETE_DAYS (1)
30
string
controllers.vaultwarden.containers.app.env.USER_ATTACHMENT_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.env.USER_SEND_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.image.repository (9)
ghcr.io/dani-garcia/vaultwarden
string
controllers.vaultwarden.containers.app.image.tag (9)
1.34.1@sha256:48267ea14d8649b2e553a5fe290c40b5dd94d54e9a24b26ae7134a75a659695f
string
controllers.vaultwarden.containers.app.envFrom[].secretRef.name (8)
vaultwarden-secret
string
controllers.vaultwarden.containers.app.resources.limits.memory (7)
2Gi
string
controllers.vaultwarden.containers.app.resources.requests.cpu (7)
100m
string
controllers.vaultwarden.containers.app.resources.requests.memory (7)
100Mi
string
controllers.vaultwarden.containers.app.securityContext.allowPrivilegeEscalation (5)
false
boolean
controllers.vaultwarden.containers.app.securityContext.capabilities.drop[] (5)
- ALL
string
controllers.vaultwarden.containers.app.securityContext.readOnlyRootFilesystem (5)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.enabled (3)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.custom (1)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.path (1)
/health
string
controllers.vaultwarden.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.port (1)
80
number
controllers.vaultwarden.containers.app.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.vaultwarden.containers.app.probes.liveness.spec.periodSeconds (1)
10
number
controllers.vaultwarden.containers.app.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.vaultwarden.containers.app.probes.readiness.enabled (3)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.custom (1)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.path (1)
/health
string
controllers.vaultwarden.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.port (1)
80
number
controllers.vaultwarden.containers.app.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.vaultwarden.containers.app.probes.readiness.spec.periodSeconds (1)
10
number
controllers.vaultwarden.containers.app.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.vaultwarden.containers.app.probes.startup.enabled (1)
true
boolean
controllers.vaultwarden.containers.app.probes.startup.spec.failureThreshold (1)
30
number
controllers.vaultwarden.containers.app.probes.startup.spec.periodSeconds (1)
5
number
controllers.vaultwarden.containers.app.ports[].containerPort (1)
80
number
controllers.vaultwarden.containers.app.ports[].name (1)
http
string
controllers.vaultwarden.annotations."reloader.stakater.com/auto" (6)
true
string
controllers.vaultwarden.annotations."secret.reloader.stakater.com/reload" (2)
vaultwarden-db-secret
string
controllers.vaultwarden.pod.securityContext.fsGroup (4)
1000
number
controllers.vaultwarden.pod.securityContext.fsGroupChangePolicy (4)
OnRootMismatch
string
controllers.vaultwarden.pod.securityContext.runAsGroup (4)
1000
number
controllers.vaultwarden.pod.securityContext.runAsUser (4)
1000
number
controllers.vaultwarden.pod.securityContext.runAsNonRoot (3)
true
boolean
controllers.vaultwarden.pod.securityContext.seccompProfile.type (3)
RuntimeDefault
string
controllers.vaultwarden.pod.labels."endpoints.netpols.home.arpa/email-sender" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/egress-namespace" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/egress-world" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/ingress-nginx" (1)
true
string
controllers.vaultwarden.pod.priorityClassName (1)
system-cluster-critical
string
controllers.vaultwarden.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
vaultwarden
string
controllers.vaultwarden.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.vaultwarden.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.vaultwarden.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.vaultwarden.initContainers.init-db.envFrom[].secretRef.name (2)
vaultwarden-secret
string
controllers.vaultwarden.initContainers.init-db.image.repository (2)
ghcr.io/home-operations/postgres-init
string
controllers.vaultwarden.initContainers.init-db.image.tag (2)
17
number
controllers.vaultwarden.initContainers.01-init-db.envFrom[].secretRef.name (1)
vaultwarden-secret
string
controllers.vaultwarden.initContainers.01-init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.vaultwarden.initContainers.01-init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.vaultwarden.initContainers.01-init-db.image.tag (1)
17.5
number
controllers.vaultwarden.labels.postgres (1)
true
string
controllers.vaultwarden.replicas (1)
2
number
controllers.vaultwarden.strategy (1)
Recreate
string
controllers.${APP}.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.${APP}.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.${APP}.containers.app.image.pullPolicy (1)
IfNotPresent
string
controllers.${APP}.containers.app.image.repository (1)
ghcr.io/dani-garcia/vaultwarden
string
controllers.${APP}.containers.app.image.tag (1)
1.34.1@sha256:48267ea14d8649b2e553a5fe290c40b5dd94d54e9a24b26ae7134a75a659695f
string
controllers.${APP}.containers.app.probes.liveness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.port (1)
80
number
controllers.${APP}.containers.app.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.${APP}.containers.app.probes.liveness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.probes.readiness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.port (1)
80
number
controllers.${APP}.containers.app.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.${APP}.containers.app.probes.readiness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.resources.limits.memory (1)
256Mi
string
controllers.${APP}.containers.app.resources.requests.cpu (1)
10m
string
controllers.${APP}.containers.app.resources.requests.memory (1)
64Mi
string
controllers.${APP}.containers.app.securityContext.fsGroup (1)
1000
number
controllers.${APP}.containers.app.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.${APP}.containers.app.securityContext.runAsGroup (1)
1000
number
controllers.${APP}.containers.app.securityContext.runAsNonRoot (1)
true
boolean
controllers.${APP}.containers.app.securityContext.runAsUser (1)
1000
number
controllers.${APP}.containers.app.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.${APP}.containers.backup.env.BACKUP_KEEP_DAYS (1)
30
number
controllers.${APP}.containers.backup.env.CRON (1)
0 5 * * *
string
controllers.${APP}.containers.backup.env.DATA_DIR (1)
/data
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE_CURL_OPTIONS (1)
-H 'Content-Type: application/json' -d '{"content":"❌ Vaultwarden backup failed!"}'
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_PING_URL
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS_CURL_OPTIONS (1)
-H 'Content-Type: application/json' -d '{"content":"✅ Vaultwarden backup completed successfully."}'
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_PING_URL
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.env.RCLONE_CONFIG (1)
/data/rclone.conf
string
controllers.${APP}.containers.backup.env.RCLONE_REMOTE_DIR (1)
/Vaultwarden-k3s/
string
controllers.${APP}.containers.backup.env.RCLONE_REMOTE_NAME (1)
Google Drive
string
controllers.${APP}.containers.backup.env.RCLONE_TEMP_DIR (1)
/data/
string
controllers.${APP}.containers.backup.env.TIMEZONE (1)
${TIMEZONE}
string
controllers.${APP}.containers.backup.env.ZIP_ENABLE (1)
true
boolean
controllers.${APP}.containers.backup.env.ZIP_PASSWORD.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_ZIP_PASSWORD
string
controllers.${APP}.containers.backup.env.ZIP_PASSWORD.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.image.pullPolicy (1)
IfNotPresent
string
controllers.${APP}.containers.backup.image.repository (1)
ghcr.io/ttionya/vaultwarden-backup
string
controllers.${APP}.containers.backup.image.tag (1)
1.24.3@sha256:1c9e85a27468ef1d713992edb08c3a8ef69852018ec567fd8603ea40de90dfff
string
controllers.${APP}.containers.backup.nameOverride (1)
backup
string
controllers.${APP}.containers.backup.resources.limits.memory (1)
256Mi
string
controllers.${APP}.containers.backup.resources.requests.cpu (1)
10m
string
controllers.${APP}.containers.backup.resources.requests.memory (1)
64Mi
string
controllers.${APP}.containers.backup.securityContext.fsGroup (1)
1000
number
controllers.${APP}.containers.backup.securityContext.readOnlyRootFilesystem (1)
false
boolean
controllers.${APP}.enabled (1)
true
boolean
controllers.${APP}.replicas (1)
1
number
controllers.${APP}.type (1)
deployment
string
service.app.ports.http.port (9)
80
number
service.app.ports.websocket.enabled (1)
true
boolean
service.app.ports.websocket.port (1)
3012
number
service.app.controller (7)
vaultwarden
string
service.app.sessionAffinity (1)
ClientIP
string
service.app.sessionAffinityConfig.clientIP.timeoutSeconds (1)
10800
number
service.vaultwarden.controller (1)
vaultwarden
string
service.vaultwarden.ports.http.port (1)
8080
number
ingress.app.hosts[].host (6)
bitwarden.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (6)
/
string
ingress.app.hosts[].paths[].service.identifier (6)
app
string
ingress.app.hosts[].paths[].service.port (6)
http
string, number
ingress.app.hosts[].paths[].pathType (1)
Prefix
string
ingress.app.className (5)
external
string
ingress.app.tls[].hosts[] (4)
- bitwarden.${SECRET_DOMAIN}
string
ingress.app.tls[].secretName (2)
${SECRET_DOMAIN/./-}-production-tls
string
ingress.app.annotations."gethomepage.dev/enabled" (3)
true
string
ingress.app.annotations."gethomepage.dev/group" (3)
Applications
string
ingress.app.annotations."gethomepage.dev/icon" (3)
vaultwarden.png
string
ingress.app.annotations."gethomepage.dev/name" (3)
Vaultwarden
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (2)
internal.${SECRET_DOMAIN_INTERNAL}
string
ingress.app.annotations."gethomepage.dev/description" (2)
Open-source password manager compatible with Bitwarden clients.
string
ingress.app.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
networking-traefik-middleware-chain-no-auth@kubernetescrd
string
ingress.app.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.app.annotations."gethomepage.dev/pod-selector" (1)
app in ( vaultwarden )
string
ingress.app.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.app.enabled (3)
true
boolean
ingress.admin.hosts[].host (3)
${app_url}
string
ingress.admin.hosts[].paths[].path (3)
/admin
string
ingress.admin.hosts[].paths[].service.identifier (3)
app
string
ingress.admin.hosts[].paths[].service.port (3)
http
string
ingress.admin.tls[].hosts[] (3)
- ${app_url}
string
ingress.admin.tls[].secretName (3)
${certificate_name}
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
networking-traefik-middleware-chain-authelia@kubernetescrd
string
ingress.admin.annotations."external-dns.alpha.kubernetes.io/exclude" (1)
true
string
ingress.admin.annotations."external-dns.alpha.kubernetes.io/target" (1)
internal.${SECRET_DOMAIN_INTERNAL}
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-response-headers" (1)
Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-signin" (1)
https://$host/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-snippet" (1)
proxy_set_header X-Forwarded-Host $http_host;
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-url" (1)
http://ak-outpost-gabernetes.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.admin.enabled (2)
true
boolean
ingress.admin.className (1)
traefik-internal
string
ingress.vaultwarden.enabled (1)
true
boolean
ingress.vaultwarden.hosts[].host (1)
${app_url}
string
ingress.vaultwarden.hosts[].paths[].path (1)
/
string
ingress.vaultwarden.hosts[].paths[].service.identifier (1)
vaultwarden
string
ingress.vaultwarden.hosts[].paths[].service.port (1)
http
string
ingress.vaultwarden.tls[].hosts[] (1)
- ${app_url}
string
ingress.vaultwarden.tls[].secretName (1)
${certificate_name}
string
persistence.config.existingClaim (5)
vaultwarden
string
persistence.config.globalMounts[].path (5)
/data
string
persistence.config.enabled (2)
true
boolean
persistence.data.accessMode (3)
ReadWriteOnce
string
persistence.data.size (3)
8Gi
string
persistence.data.storageClass (3)
longhorn-ssd
string
persistence.data.enabled (2)
true
boolean
persistence.data.existingClaim (2)
vaultwarden
string
persistence.data.retain (2)
true
boolean
persistence.data.type (2)
persistentVolumeClaim
string
persistence.data.advancedMounts.vaultwarden.app[].path (1)
/data
string
persistence.data.globalMounts[].path (1)
/data
string
persistence.data.suffix (1)
data
string
persistence.env.advancedMounts.${APP}.app[].path (1)
/.env
string
persistence.env.advancedMounts.${APP}.app[].readOnly (1)
true
boolean
persistence.env.advancedMounts.${APP}.app[].subPath (1)
.env
string
persistence.env.enabled (1)
true
boolean
persistence.env.items[].key (1)
.env
string
persistence.env.items[].path (1)
.env
string
persistence.env.name (1)
vaultwarden-secret
string
persistence.env.type (1)
secret
string
persistence.postgres-serving-cert.advancedMounts.vaultwarden.app[].path (1)
/certs/postgres/serving
string
persistence.postgres-serving-cert.defaultMode (1)
444
number
persistence.postgres-serving-cert.items[].key (1)
ca.crt
string
persistence.postgres-serving-cert.items[].path (1)
ca.crt
string
persistence.postgres-serving-cert.name (1)
vaultwarden-postgres-17-serving-cert
string
persistence.postgres-serving-cert.type (1)
secret
string
persistence.postgres-user-cert.advancedMounts.vaultwarden.app[].path (1)
/certs/postgres/user
string
persistence.postgres-user-cert.defaultMode (1)
440
number
persistence.postgres-user-cert.items[].key (1)
tls.crt
tls.key
string
persistence.postgres-user-cert.items[].path (1)
tls.crt
tls.key
string
persistence.postgres-user-cert.name (1)
vaultwarden-postgres-vaultwarden-user
string
persistence.postgres-user-cert.type (1)
secret
string
defaultPodOptions.securityContext.runAsGroup (2)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (2)
true
boolean
defaultPodOptions.securityContext.runAsUser (2)
1000
number
defaultPodOptions.securityContext.fsGroup (1)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
route.app.hostnames[] (2)
- passwords.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (2)
external
string
route.app.parentRefs[].namespace (2)
network
string
route.app.parentRefs[].sectionName (2)
https
string
route.app.rules[].backendRefs[].name (1)
vaultwarden
string
route.app.rules[].backendRefs[].port (1)
80
number