vaultwarden helm

No introduction found. Create it?

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install vaultwarden bjw-s/app-template -f values.yaml

Top Repositories (3 out of 22)

See examples from other people.

NameRepoStarsVersionTimestamp
vaultwardenauricom/home-ops1121.5.119 days ago
vaultwardenDiaoul/home-ops541.5.122 days ago
vaultwardentoboshii/home-ops2120.2.28 months ago

Values

See the most popular values for this chart:

KeyTypes
image.repository (22)
vaultwarden/server
string
image.tag (22)
1.29.2
string
image.pullPolicy (3)
IfNotPresent
string
ingress.main.enabled (21)
true
boolean
ingress.main.hosts[].host (21)
vault.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (21)
/
/notifications/hub/negotiate
/notifications/hub
string
ingress.main.hosts[].paths[].pathType (20)
Prefix
Prefix
Prefix
string
ingress.main.hosts[].paths[].service.port (17)
80
80
3012
number
ingress.main.hosts[].paths[].servicePort (1)
3012
number
ingress.main.tls[].hosts[] (21)
- vault.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (8)
vaultwarden-tls
string
ingress.main.ingressClassName (19)
nginx
string
ingress.main.annotations."hajimari.io/icon" (10)
mdi:lock
string
ingress.main.annotations."hajimari.io/enable" (7)
true
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (6)
letsencrypt-production
string
ingress.main.annotations.external-dns/is-public (4)
true
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (4)
dyn.${SECRET_DOMAIN}
string
ingress.main.annotations."external-dns.home.arpa/enabled" (4)
true
string
ingress.main.annotations."hajimari.io/appName" (4)
vaultwarden
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (4)
websecure
string
ingress.main.annotations."hajimari.io/group" (3)
groupware
string
ingress.main.annotations."traefik.ingress.kubernetes.io/router.middlewares" (3)
networking-cloudflare-ips@kubernetescrd
string
ingress.main.annotations."cert-manager.home.arpa/enabled" (1)
true
string
ingress.main.annotations."gethomepage.dev/description" (1)
Open Source Password Manager.
string
ingress.main.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.main.annotations."gethomepage.dev/group" (1)
Security
string
ingress.main.annotations."gethomepage.dev/icon" (1)
vaultwarden
string
ingress.main.annotations."gethomepage.dev/name" (1)
Vaultwarden
string
ingress.main.annotations."hajimari.io/instance" (1)
admin
string
ingress.main.annotations."hajimari.io/url" (1)
https://bw.${SECRET_DOMAIN}/
string
ingress.main.annotations."ingress.home.arpa/type" (1)
external
string
ingress.main.annotations."kubernetes.io/ingress.class" (1)
nginx
string
ingress.main.annotations."theme.home.arpa/enabled" (1)
true
string
ingress.admin.enabled (8)
true
boolean
ingress.admin.hosts[].host (8)
vault.${SECRET_DOMAIN}
string
ingress.admin.hosts[].paths[].path (8)
/admin
string
ingress.admin.hosts[].paths[].pathType (8)
Prefix
string
ingress.admin.hosts[].paths[].service.port (3)
8080
number
ingress.admin.tls[].hosts[] (8)
- vault.${SECRET_DOMAIN}
string
ingress.admin.tls[].secretName (3)
vaultwarden-tls
string
ingress.admin.ingressClassName (7)
traefik
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (3)
websecure
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/whitelist-source-range" (2)
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
networking-rfc1918@kubernetescrd
string
ingress.admin.annotations."cert-manager.home.arpa/enabled" (1)
true
string
ingress.admin.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.admin.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/custom-http-errors" (1)
403,404,500,501,502,503
string
service.main.ports.http.port (21)
80
number
service.main.ports.websocket.enabled (19)
true
boolean
service.main.ports.websocket.port (19)
3012
number
env.DOMAIN (19)
https://vault.${SECRET_DOMAIN}
string
env.DATA_FOLDER (18)
config
string
env.SIGNUPS_ALLOWED (18)
false
boolean, string
env.TZ (16)
${TIMEZONE}
string
env.SMTP_PORT (15)
587
number
env.WEBSOCKET_ENABLED (15)
true
boolean, string
env.WEBSOCKET_ADDRESS (14)
0.0.0.0
string
env.WEBSOCKET_PORT (12)
3012
number
env.SMTP_HOST.valueFrom.secretKeyRef.key (2)
SMTP_HOST
string
env.SMTP_HOST.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_HOST (11)
mail.${SECRET_FAM_DOMAIN}
string
env.SMTP_FROM (10)
vaultwarden@${SECRET_DOMAIN}
string
env.SMTP_FROM_NAME.valueFrom.secretKeyRef.key (2)
SMTP_FROM
string
env.SMTP_FROM_NAME.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_FROM_NAME (10)
Vault
string
env.SMTP_FROM.valueFrom.secretKeyRef.key (2)
SMTP_FROM
string
env.SMTP_FROM.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_SSL (10)
true
string, boolean
env.SMTP_SECURITY (9)
off
string
env.ATTACHMENTS_FOLDER (8)
config/attachments
string
env.ICON_CACHE_FOLDER (8)
config/icon_cache
string
env.INVITATIONS_ALLOWED (5)
true
boolean, string
env.ROCKET_PORT (5)
8080
number
env.DISABLE_2FA_REMEMBER (4)
false
boolean
env.DISABLE_ICON_DOWNLOAD (4)
false
boolean
env.EMERGENCY_ACCESS_ALLOWED (4)
true
boolean
env.PASSWORD_HINTS_ALLOWED (4)
false
boolean
env.SENDS_ALLOWED (4)
true
boolean
env.SENDS_FOLDER (4)
config/sends
string
env.DATABASE_URL.valueFrom.secretKeyRef.key (3)
POSTGRES_URL
string
env.DATABASE_URL.valueFrom.secretKeyRef.name (3)
vaultwarden
string
env.DATABASE_URL (1)
postgres://$(A_DATABASE_USERNAME):$(A_DATABASE_PASSWORD)@pg-vaultwarden-rw:5432/vaultwarden
string
env.SHOW_PASSWORD_HINT (3)
false
string
env.ADMIN_TOKEN.valueFrom.secretKeyRef.key (1)
ADMIN_TOKEN
string
env.ADMIN_TOKEN.valueFrom.secretKeyRef.name (1)
vaultwarden
string
env.ADMIN_TOKEN (2)
${VAULTWARDEN_ADMIN_TOKEN}
string
env.EMAIL_ATTEMPTS_LIMIT (2)
3
number
env.INVITATION_ORG_NAME.valueFrom.secretKeyRef.key (2)
INVITATION_ORG_NAME
string
env.INVITATION_ORG_NAME.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.INVITATION_ORG_NAME (1)
${SECRET_DOMAIN}
string
env.IP_HEADER (2)
X-Envoy-External-Address
string
env.ORG_CREATION_USERS.valueFrom.secretKeyRef.key (2)
ORG_CREATION_USERS
string
env.ORG_CREATION_USERS.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SIGNUPS_DOMAINS_WHITELIST.valueFrom.secretKeyRef.key (2)
SIGNUPS_DOMAINS_WHITELIST
string
env.SIGNUPS_DOMAINS_WHITELIST.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_PASSWORD.valueFrom.secretKeyRef.key (2)
SMTP_PASSWORD
string
env.SMTP_PASSWORD.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_PASSWORD (1)
${SECRET_SENDGRID_API_KEY}
string
env.SMTP_USERNAME.valueFrom.secretKeyRef.key (2)
SMTP_USERNAME
string
env.SMTP_USERNAME.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.SMTP_USERNAME (1)
apikey
string
env.YUBICO_CLIENT_ID.valueFrom.secretKeyRef.key (2)
YUBICO_CLIENT_ID
string
env.YUBICO_CLIENT_ID.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.YUBICO_CLIENT_ID (1)
${VAULTWARDEN_YUBICO_CLIENT_ID}
string
env.YUBICO_SECRET_KEY.valueFrom.secretKeyRef.key (2)
YUBICO_SECRET_KEY
string
env.YUBICO_SECRET_KEY.valueFrom.secretKeyRef.name (2)
vaultwarden-env
string
env.YUBICO_SECRET_KEY (1)
${VAULTWARDEN_YUBICO_SECRET_KEY}
string
env.A_DATABASE_PASSWORD.valueFrom.secretKeyRef.key (1)
password
string
env.A_DATABASE_PASSWORD.valueFrom.secretKeyRef.name (1)
pg-vaultwarden-app
string
env.A_DATABASE_USERNAME.valueFrom.secretKeyRef.key (1)
username
string
env.A_DATABASE_USERNAME.valueFrom.secretKeyRef.name (1)
pg-vaultwarden-app
string
env.EVENTS_DAYS_RETAIN (1)
730
string
env.ORG_EVENTS_ENABLED (1)
true
string
env.PASSWORD_ITERATIONS (1)
321000
string
env.REQUIRE_DEVICE_EMAIL (1)
true
string
env.SMTP_EXPLICIT_TLS (1)
true
string
env.TRASH_AUTO_DELETE_DAYS (1)
30
string
envFrom[].secretRef.name (15)
vaultwarden
string
persistence.config.enabled (14)
true
boolean
persistence.config.existingClaim (13)
vaultwarden-config-v1
string
persistence.config.mountPath (3)
/config
string
persistence.config.path (1)
/mnt/raid/nfs/vaultwarden
string
persistence.config.retain (1)
true
boolean
persistence.config.server (1)
${NFS_HOST}
string
persistence.config.storageClass (1)
longhorn
string
persistence.config.type (1)
nfs
string
persistence.data.enabled (5)
true
boolean
persistence.data.existingClaim (4)
vaultwarden-data
string
persistence.data.mountPath (3)
/data
string
persistence.data.accessMode (1)
ReadWriteOnce
string
persistence.data.size (1)
1Gi
string
persistence.data.type (1)
pvc
string
resources.requests.cpu (14)
100m
string
resources.requests.memory (14)
100Mi
string
resources.limits.memory (13)
2Gi
string
resources.limits.cpu (2)
200m
string
controller.annotations."reloader.stakater.com/auto" (8)
true
string
controller.annotations."secret.reloader.stakater.com/reload" (1)
vaultwarden-secret
string
controller.type (7)
statefulset
string
podSecurityContext.fsGroup (8)
568
number
podSecurityContext.fsGroupChangePolicy (8)
OnRootMismatch
string
podSecurityContext.runAsGroup (8)
568
number
podSecurityContext.runAsUser (8)
568
number
podSecurityContext.supplementalGroups[] (4)
- "100"
number
strategy.type (5)
Recreate
string
initContainers.01-init-db.image (3)
ghcr.io/onedr0p/postgres-initdb:14.8@sha256:0141cf427c47f2d534711a3f9e8c5f9008bc6b585463ccd9288cf0f027e20deb
string
initContainers.01-init-db.envFrom[].secretRef.name (2)
vaultwarden-secret
string
initContainers.01-init-db.imagePullPolicy (2)
IfNotPresent
string
initContainers.01-init-db.env[].name (1)
POSTGRES_HOST
POSTGRES_DB
POSTGRES_SUPER_PASS
POSTGRES_USER
POSTGRES_PASS
string
initContainers.01-init-db.env[].value (1)
${POSTGRES_RW_URL}
vaultwarden
string
initContainers.01-init-db.env[].valueFrom.secretKeyRef.key (1)
password
POSTGRES_USER
POSTGRES_PASS
string
initContainers.01-init-db.env[].valueFrom.secretKeyRef.name (1)
postgres-superuser
vaultwarden
vaultwarden
string
initContainers.init-db.envFrom[].secretRef.name (3)
vaultwarden-secret
string
initContainers.init-db.image (3)
ghcr.io/onedr0p/postgres-init:14.9
string
podAnnotations."secret.reloader.stakater.com/reload" (3)
vaultwarden
string
volumeClaimTemplates[].accessMode (3)
ReadWriteOnce
string
volumeClaimTemplates[].mountPath (3)
/config
string
volumeClaimTemplates[].name (3)
config
string
volumeClaimTemplates[].size (3)
15Gi
string
volumeClaimTemplates[].storageClass (3)
ceph-block
string
global.nameOverride (2)
vaultwarden
string
probes.liveness.custom (1)
true
boolean
probes.liveness.enabled (1)
true
boolean
probes.liveness.spec.failureThreshold (1)
3
number
probes.liveness.spec.httpGet.path (1)
/alive
string
probes.liveness.spec.httpGet.port (1)
80
number
probes.liveness.spec.initialDelaySeconds (1)
0
number
probes.liveness.spec.periodSeconds (1)
10
number
probes.liveness.spec.timeoutSeconds (1)
1
number
probes.readiness.custom (1)
true
boolean
probes.readiness.enabled (1)
true
boolean
probes.readiness.spec.failureThreshold (1)
3
number
probes.readiness.spec.httpGet.path (1)
/alive
string
probes.readiness.spec.httpGet.port (1)
80
number
probes.readiness.spec.initialDelaySeconds (1)
0
number
probes.readiness.spec.periodSeconds (1)
10
number
probes.readiness.spec.timeoutSeconds (1)
1
number
updateStrategy (1)
Recreate
string
upgradeStrategy (1)
recreate
string