News for hackers. Stuff that matters.
Re:Bitwarden Acquires Passwordless.dev by penciltwirler on Wednesday January 18, 2023 @11:16AM (#34428640)
One can easily self host a bitwarden server on digitalocean. https://bitwarden.com/blog/digitalocean-marketplace/

However, I'm curious what y'all think about the cost. A digitalocean droplet for the recommended specs (4 GiB memory) is $24/month. This is hard to stomach when you compare with Bitwarden Premium which is <$1/month. I guess it depends on how much you value your own data.

Re:Bitwarden Acquires Passwordless.dev by sodality2 on Wednesday January 18, 2023 @11:25AM (#34428783)
Highly recommend using Vaultwarden, API compatible OSS server. It even provides premium features like TOTP for saved sites. I could host it on a small $12/yr VPS but currently host it on a home server. Minimum specs are very low for it as it’s written in Rust.

DO inflates prices for their systems, sometimes I guess it’s worth it but you can get a great dedi with FAR better performance from Hetzner auctions for $32/mo. 64GB RAM, proper CPU, large HDD, could probably host a thousand Vaultwarden instances. Definitely don’t use that for just Vaultwarden, it’s just an example, but yeah.

Re:Bitwarden Acquires Passwordless.dev by jeroenhd on Wednesday January 18, 2023 @11:23AM (#34428747)
You can run the open source VaultWarden server (https://github.com/dani-garcia/vaultwarden) on way slower hardware. It takes a while for the project to catch up in terms of API support compared to the official server, but it's great for self hosting.
Re:Bitwarden Acquires Passwordless.dev by ramsj on Wednesday January 18, 2023 @11:36AM (#34428971)
I run Vaultwarden on the free VPS from Google Cloud and it works great.
Re:Bitwarden Acquires Passwordless.dev by jslql on Wednesday January 18, 2023 @11:34AM (#34428945)
4 gb of memory for something like this? Absolutely deranged. How can they not see that?
Re:Bitwarden Acquires Passwordless.dev by rqtwteye on Wednesday January 18, 2023 @11:28AM (#34428824)
If you self host, why would you need such specs? You would access your server a few times a day at best. Otherwise it just sits there.
Re:Bitwarden Acquires Passwordless.dev by wallmountedtv on Wednesday January 18, 2023 @11:25AM (#34428787)
You can use vaultwarden, which is a re-implementation in Rust that is much more lightweight than the official .NET version.
Re:Bitwarden Acquires Passwordless.dev by metaltyphoon on Wednesday January 18, 2023 @12:10PM (#34429503)
I wish they would drop SQL for the self hosting and just use SQLite instead. That's what eats the most RAM on self hosting in .NET version.
Re:Bitwarden Acquires Passwordless.dev by jeroenhd on Wednesday January 18, 2023 @01:46PM (#34431023)
Based on their current docker-compose file, it seems like they did away with the MS SQL server, at least: https://github.com/bitwarden/server/blob/master/docker-unifi...

[This issue](https://github.com/bitwarden/server/pull/2487) also suggests SQLite was added as a database driver last December.

Re:Bitwarden Acquires Passwordless.dev by recuter on Wednesday January 18, 2023 @11:29AM (#34428846)
Why does it need to run 24/7?
Re:Bitwarden Acquires Passwordless.dev by fullstop on Wednesday January 18, 2023 @11:27AM (#34428813)
Vaultwarden can run on their $5 droplet.
Re:Bitwarden Acquires Passwordless.dev by mdaniel on Wednesday January 18, 2023 @12:30PM (#34429846)
Aside from the highly relevant cost observations of the sibling comments, one will want to be cognizant of the ... very strange .. opsec that installer uses. It's a lot of curl into bash, self-updating things, url shorteners, and :latest tags

discussed when it was announced: https://news.ycombinator.com/item?id=31098608

Re:Bitwarden Acquires Passwordless.dev by kevwil on Wednesday January 18, 2023 @03:18PM (#34432424)
It makes me think (dangerous, I know) ... I find it odd to use the term "self host" when referring to a third-party cloud. It's someone else's servers and network and electric bill, after all.

Pedantry aside, yeah that seems expensive given the amount of convenience offered. But much more convenient than setting up a server in your basement with a UPS and external backup drives and such.

Re:Bitwarden Acquires Passwordless.dev by selykg on Wednesday January 18, 2023 @03:26PM (#34432544)
Self hosting is a scale. But the point is you have the ability to host it how you want. Whether that be on a cloud service that you just throw a docker container at, to a VPS with root, to a bare metal machine co-hosted, to in your basement, the choice is yours.
Re:Bitwarden Acquires Passwordless.dev by jedahan on Wednesday January 18, 2023 @03:56PM (#34432961)
They are working on reducing the requirements - see https://bitwarden.com/help/install-and-deploy-unified-beta/ which claims 200 MB RAM and 1GB storage requirements.
Re:Bitwarden Acquires Passwordless.dev by attentive on Monday January 23, 2023 @12:37AM (#34485854)
1. oci has free ARM instances. 2. you don't need much server hw for vaultwarden 3. you don't need a server for keepassxc