News for hackers. Stuff that matters.
Re:Ask HN: What do you self-host? by dmos62 on Sunday October 13, 2019 @12:22PM (#21241209)
I see you're using Bitwarden.

Does anyone have recommendations for password+sensitive-data management?

I'm currently using Keepass and git, but I have one big qualm. You cannot choose to not version-control that one big encrypted (un-diff-able) file.

Re:Ask HN: What do you self-host? by johntash on Tuesday October 15, 2019 @12:23AM (#21255540)
You might like Pass [0] or GoPass [1] which had more features the last I looked at it.

They both store passwords/data in gpg-encrypted files in a git repo. I'm not sure what the state of GUIs/browser plugins are for it, but I'm pretty sure there are some out there.

You can also set up your git config to be able to diff encrypted .gpg files so that the files are diff-able even though they're encrypted.

[0]: https://www.passwordstore.org/

[1]: https://github.com/gopasspw/gopass

Re:Ask HN: What do you self-host? by dmos62 on Tuesday October 15, 2019 @03:24PM (#21262590)
Yeah, I like Pass the most in this space, but it doesn't encrypt the index of logins/items that you're keeping. I.e. it's a folder tree of encrypted files, so you can see the sites, logins and other things that I'm using. That's kind of a deal breaker for me, though I'm pondering if I'm being practical, or just overly cautious.
Re:Ask HN: What do you self-host? by monotux on Monday October 14, 2019 @08:43AM (#21247600)
Bitwarden can be self-hosted and it's server is open source (and security audited, for what it's worth). I've used it for a few years or so and I've had no issues this far.

One other alternative to keepass is pass[1].

[1]: https://www.passwordstore.org/

Re:Ask HN: What do you self-host? by erulabs on Sunday October 13, 2019 @04:39PM (#21242829)
Vault or Bitwarden are great for projects once they get serious - Unfortunately there isn't a one-size-fits all solution that doesn't suck in one way or another. Setting up vault is fairly non-trivial.