Official Bitwarden lite
Kumo runs the official ghcr.io/bitwarden/lite image for personal and homelab self-hosting.
Self-Hosted Bitwarden
Your own private password manager, web vault, and sync server.
Bitwarden is an open-source password manager for logins, passkeys, secure notes, cards, identities, and shared vaults. On Kumo2 you can deploy Bitwarden lite in one click with the official ghcr.io/bitwarden/lite image, a private Postgres database, persistent Docker volumes, and HTTPS on https://SERVER_IP:8443 using a self-signed certificate until you attach a trusted certificate or reverse proxy.
7-day money-back guarantee
Features
HTTPS first access
The vault is exposed on https://SERVER_IP:8443 with Bitwarden's self-signed certificate path, while port 8080 remains available for HTTP reverse-proxy setups.
Private Postgres database
The Compose stack includes Postgres 16 on a private Docker network, with credentials generated per VM and kept out of customer-facing outputs.
Persistent vault data
Bitwarden configuration, generated certificates, vault data, and Postgres data live on named Docker volumes on your VM.
What you can do with it
- Run a personal password vault for browser extensions, desktop apps, mobile apps, secure notes, and passkeys.
- Keep credentials on a server you control while still using the familiar Bitwarden clients and web vault.
- Start with self-signed HTTPS on the server IP, then add DNS, a trusted certificate, reverse proxy, backups, and monitoring.
System requirements
CPU
1 vCPU
Memory
1 GB
Storage
20 GB
Runtime
Docker Compose
Port
8443
Recommended sizes
Personal Vault
1 vCPU / 1 GB RAM / 20 GB SSD
A compact Bitwarden lite vault for personal passwords, passkeys, secure notes, and homelab testing.
Bitwarden Lite Recommended
Default2 vCPU / 2 GB RAM / 40 GB SSD
A stronger default for personal or family use with Postgres, TLS, and browser/mobile sync.
Family Vault
2 vCPU / 4 GB RAM / 60 GB SSD
More headroom for multiple users, vault item growth, attachments, and regular client sync activity.
Busy Private Vault
4 vCPU / 8 GB RAM / 120 GB SSD
For heavier personal deployments with more attachments, organizations, and extra database headroom.
Resources & documentation
How deployment works
- 1
Pick a plan and a region close to you.
- 2
Choose how you'll sign in and confirm your order.
- 3
Kumo provisions a Linux server and starts the app with Docker — ready in minutes.
Frequently asked questions
What is self-hosted Bitwarden?
It is Bitwarden lite running on a cloud server that belongs to your Kumo2 account. You control the VM, Docker Compose stack, Postgres database, persistent volumes, and network exposure.
What do I need before deployment?
Bitwarden requires a valid installation ID and installation key generated from bitwarden.com/host. Kumo asks for those during checkout and stores the key as a secret.
How do I access it after deployment?
Open https://SERVER_IP:8443 in your browser. The first deployment uses a self-signed certificate, so your browser may ask you to accept a warning before you register the first account.
Is Bitwarden lite for business use?
Bitwarden's documentation says lite is intended for personal use and homelabs, and businesses should use standard deployment options. This Kumo template follows that personal/homelab use case.
What size should I choose?
Personal Vault can run a small setup, but Bitwarden Lite Recommended gives more breathing room for Postgres, HTTPS, sync clients, and attachment growth.
Ready to deploy your own Bitwarden?
Spin it up on a server you control. We handle provisioning and Docker — you keep the keys.
Deploy Bitwarden7-day money-back guarantee
Not happy within 7 days of deploying? Get a full refund — just ask.