Skip to content

backvault.md

Latest commit

 

History

History
44 lines (38 loc) · 1.53 KB

backvault.md

File metadata and controls

44 lines (38 loc) · 1.53 KB
title Backvault
description A guide to deploying Backvault
published true
date 2025-12-04 17:02:44 UTC
tags
editor markdown
dateCreated 2025-12-04 16:38:53 UTC

What is Backvault?

BackVault is a lightweight Dockerized multi-architecture service that periodically backs up your Bitwarden or Vaultwarden vaults into password-protected encrypted files. It’s designed for hands-free, secure, and automated backups using the official Bitwarden CLI.

1 · Deploy Backvault

services:
  backvault:
    image: mvflc/backvault:latest
    container_name: backvault
    restart: unless-stopped
    environment:
      BW_SERVER: "https://vault.yourdomain.com"
      BACKUP_ENCRYPTION_MODE: "raw" # Use 'bitwarden' for the default format
      BACKUP_INTERVAL_HOURS: 12
      NODE_TLS_REJECT_UNAUTHORIZED: 0
      TZ: America/New_York
    volumes:
      - /mnt/tank/configs/backvault/backups:/app/backups
      - /mnt/tank/configs/backvault/db:/app/db
    ports:
      - "8080:8080"

2 · Correcting Permissions

Backvault needs your folders to be owned by user:group 1000. Assuming you used the file structure above run this command as root in the TrueNAS shell:

chown 1000:1000 /mnt/tank/configs/backvault -R

Now restart your container.

3 · View API Keys

If you are using Vaultwarden, navigate to Settings → Security → API Key and click View API Key to see your Client ID and Client Secret