4.6 KiB
Install and setup instructions for Passbolt
- Introduction
- Installation
- Setup first admin user
- Setup Android Mobile App
- Acknowledgment / Troubleshoot
Introduction
Passbolt is an open source password manager with MariaDB backend.
Installation
Pre-Installation Steps
Create directorys:
sudo mkdir /portainer/Files/AppData/Config/passbolt && \
sudo mkdir /portainer/Files/AppData/Config/passbolt/certs
Generate a proper Self-signed certificate. Type in the code below and change it to your needs:
sudo openssl req -x509 \
-newkey rsa:4096 \
-days 120 \
-subj "/C=LU/ST=Luxembourg/L=Esch-Sur-Alzette/O=Passbolt SA/OU=Passbolt IT Team/CN=passbolt.domain.tld/" \
-nodes \
-addext "subjectAltName = DNS:passbolt.domain.tld" \
-keyout /portainer/Files/AppData/Config/passbolt/certs/key.pem \
-out /portainer/Files/AppData/Config/passbolt/certs/cert.pem
This command will output two files: key.pem and cert.pem.
Of course, replace -subj values with your own. It is important to set your passbolt FQDN in both CN and subjectAltName.
You can use an IP address instead of a domain name for your self-signed certificate. If you do that, replace DNS with IP in subjectAltName. Example: IP:127.0.0.1
Install the App Template.
Goto App Templates and click on "Passbolt". Change Configuration to your needs:
- PUID (Enter your user's PUID here)
- PGID (Enter your user's PGID here)
- TZ (Enter your time zone here. See examples here)
- MYSQL_ROOT_PASSWORD (Enter your MySql root password here)
- MYSQL_DATABASE (Enter your Passbolt database name here)
- MYSQL_USER (Enter your Passbolt database user here)
- MYSQL_PASSWORD (Enter your Passbolt database password here)
- PASSBOLT_PORT (Enter your Passbolt https port here)
- PASSBOLT_URL (Enter your full Passbolt https base URL here. Including port if different from 443)
- EMAIL_FROM_NAME (Enter your from email name)
- EMAIL_FROM_ADDRESS (Enter your from email address)
- EMAIL_SMTP_SERVER (Enter your email smtp server here)
- EMAIL_SMTP_PORT (Enter your email smtp port here)
- EMAIL_USERNAME (Enter your email username here)
- EMAIL_PASSWORD (Enter your email password here)
- EMAIL_TLS (Enter set TLS here)
Setup first admin user
Go into Passbolt container console. Type in the code below and change it to your needs:
su -s /bin/bash -c "./bin/cake \
passbolt register_user \
-u youremail@mail.net \
-f yourfirstname \
-l yourlastname \
-r admin" www-data
After that you get something like this:
____ __ ____
/ __ \____ _____ ____/ /_ ____ / / /_
/ /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
/ ____/ /_/ (__ |__ ) /_/ / /_/ / / /
/_/ \__,_/____/____/_.___/\____/_/\__/
Open source password manager for teams
-------------------------------------------------------------------------------
User saved successfully.
To start registration follow the link provided in your mailbox or here:
https://passbolt.local/setup/start/9fb7180d-b44b-41bf-bf77-8c5ab23e8cbc/966ce549-18ec-4b12-9171-9a1bb2f1a393
Now you should get an email. Open it and click on get starded.
If you do not get an email:
- Double check configuration above
- Have a look into your spam folder
- Copy the url above and paste it in browser
You may have to accept self signed certificate and/or install Passbolt browser add-on.
Proceed with Welcome to Passbolt, please select a passphrase!.
Setup Android Mobile App
Import certificate on mobile application
How to import SSL certificate on mobile application
Transfer your account key
In your desktop browser go to log in to Passbolt, navigate to your user > Mobile Transfer and follow the steps.