Self-host Checklist
Use this checklist to ensure that the key stakeholders in your deployment of Bitwarden in a self-hosted environment are aware of the critical stages and timelines. Reduce the risk of delays and miscommunication by aligning on these topics.
Role | Assigned team or member |
|---|---|
Self-host project lead | |
Executive sponsor | |
Server (Windows or Linux) admin | |
Identity Provider & Single Sign-On admin | |
SMTP admin | |
Security & Compliance lead | |
Business continuity | |
Device management admin |
Address the following key decisions before deploying your Bitwarden server:
Key decision | Description | Assigned team or member | Support links |
|---|---|---|---|
Deployment method | Will you deploy in the Bitwarden US or EU cloud? | ||
Server configuration | What environment variables will you leverage on your server to meet organizational security requirements? | ||
Database selection | Will your server use the packaged MSSQL database or will connect to a separate MSSQL database? | ||
Certificate selection | Which certificate option will you use to secure data in-transit? |
Address the following key decisions before onboarding users to your server:
Key decision | Description | Assigned team or member | Support links |
|---|---|---|---|
Administration team | Who are the administrators who will manage and maintain your server? | ||
Maintenance plan | What is your strategy for executing updates, and performing security audits to keep Bitwarden secure and up-to-date? | ||
Backup plan | What are your processes for taking and automating regular backups of the server, virtual machine, and other services? Will you take user-level backups, hypervisor backups, and database snapshots? | ||
Disaster recovery plan | What is your strategy for disaster recovery and how will you enumerate and test DR scenarios? | ||
Testing | How will you test server-client connections, server performance, and maintenance, backup, and DR plans? | ||
Compliance & integration plan | How will you ensure your setup meets regulatory compliance requirements and integrates with your existing IT infrastructure? |