replica-omnisciente/docs/vaultwarden-setup.md

Vaultwarden Setup — CT 216 (pf-management)

Status: ✅ Running with Admin Token

URL: https://vault.portugalfuturista.org
Admin Panel: https://vault.portugalfuturista.org/admin
Admin Token: Z9gGqqc1+HdnZH29rlUa7ryMlXfRfSk7rF3zBt6Kyz0AOQhd6BToHlr00JlODe2I

---

Step 1: Login to Admin Panel

1. Open https://vault.portugalfuturista.org/admin
2. Enter the admin token when prompted
3. You'll see the admin dashboard

---

Step 2: Invite triviabilidades User

1. Go to Users tab in the admin panel
2. In the Invite User section, enter:

   triviabilidades@portugalfuturista.org
   

3. Click Invite
4. The user will receive an email to set their master password

Note: If email is not configured, the user can register directly at: https://vault.portugalfuturista.org/register

---

Step 3: Save Secrets to Vaultwarden

After logging in as triviabilidades (or fabiorafaelcoutada), create entries for:

InfluxDB Token

• Name: InfluxDB Token
• Username: Savearth
• Password: fAclpE9qRE9r9XfRkFf9
• URL: http://172.31.21.178:8086

Radarr API Key

• Name: Radarr API Key
• Username: (none)
• Password: 63a6138b4a0a49fc8742a7cefbf6b604
• URL: http://192.168.0.19:7878

Sonarr API Key

• Name: Sonarr API Key
• Username: (none)
• Password: ca6728ec5e8a444c9888fccb678298d0
• URL: http://192.168.0.19:8989

Lidarr API Key

• Name: Lidarr API Key
• Username: (none)
• Password: 24077d03b9a742a786dd799567659cb8
• URL: http://192.168.0.19:8686

---

Step 4: Update Code to Use Environment Variables

After saving secrets to Vaultwarden, update the following files to use env vars:

server.py (Line 53)

# Before (hardcoded):
INFLUXDB_TOKEN = os.environ.get("INFLUXDB_TOKEN", "fAclpE9qRE9r9XfRkFf9")

# After (env var only):
INFLUXDB_TOKEN = os.environ.get("INFLUXDB_TOKEN", "")

tools/test_missing_api.py

# Read from environment:
RADARR_KEY = os.environ.get("RADARR_KEY", "")
SONARR_KEY = os.environ.get("SONARR_KEY", "")
LIDARR_KEY = os.environ.get("LIDARR_KEY", "")

Set environment variables in systemd or .env:

export INFLUXDB_TOKEN="fAclpE9qRE9r9XfRkFf9"
export RADARR_KEY="63a6138b4a0a49fc8742a7cefbf6b604"
export SONARR_KEY="ca6728ec5e8a444c9888fccb678298d0"
export LIDARR_KEY="24077d03b9a742a786dd799567659cb8"

---

Step 5: Hash Admin Token (Optional, Recommended)

For production, hash the admin token:

# On CT 216:
docker exec pf-vaultwarden /vaultwarden hash -t "Z9gGqqc1+HdnZH29rlUa7ryMlXfRfSk7rF3zBt6Kyz0AOQhd6BToHlr00JlODe2I"

Then update docker-compose.yml with the hashed value.

---

Existing User

• fabiorafaelcoutada@portugalfuturista.org (verified, already registered)

---

Infrastructure

• Container: pf-vaultwarden on CT 216 (192.168.0.26)
• Port: 8088 (mapped from 80)
• Data: /opt/management/vaultwarden
• Cloudflare: vault.portugalfuturista.org → CT 216:8088