Passbolt

Passbolt is a free and open source password manager designed for collaboration. With Passbolt you can securely generate, store, manage and monitor your team credentials. Get access to all of your logins and passwords from multiple browsers or even your mobile phone.

Configuration

Type

Compose

Platform

linux

Env vars

PUID=1000PGID=1000TZ=Europe/ZurichMYSQL_ROOT_PASSWORD=MYSQL_DATABASE=passboltMYSQL_USER=passboltMYSQL_PASSWORD=PASSBOLT_PORT=443PASSBOLT_URL=https://passbolt.localEMAIL_FROM_NAME=PassboltEMAIL_FROM_ADDRESS=EMAIL_SMTP_SERVER=smtp.gmail.comEMAIL_SMTP_PORT=587EMAIL_USERNAME=EMAIL_PASSWORD=EMAIL_TLS=true

Restart

unless-stopped

Source

Repo

Template by novaspirit·Source

Notes

Template created by Pi-Hosted Series
Check our Github page: https://github.com/pi-hosted/pi-hosted

Official Webpage: https://github.com/pi-hosted/pi-hosted/blob/master/docs/passbolt.md
Official Docker Documentation: https://github.com/pi-hosted/pi-hosted/blob/master/docs/passbolt.md

Pi-Hosted dedicated documentation: passbolt.md

Services

passbolt-db

Configuration

Image

linuxserver/mariadb:arm64v8-latest

Volumes

/config : /portainer/Files/AppData/Config/passbolt/db

Env vars

PUID=${PUID}PGID=${PGID}MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}MYSQL_DATABASE=${MYSQL_DATABASE}MYSQL_USER=${MYSQL_USER}MYSQL_PASSWORD=${MYSQL_PASSWORD}

Restart

unless-stopped

Image details

Pulls: 417.4M

User: linuxserver

Created: Oct 13, 2015

Updated: 6 days ago

Status: active

passbolt

Configuration

Image

passbolt/passbolt:latest-ce

Command

/usr/bin/wait-for.sh,-t,0,passbolt-db:3306,--,/docker-entrypoint.sh

Ports

${PASSBOLT_PORT}:443

Volumes

/etc/ssl/certs/certificate.crt : /portainer/Files/AppData/Config/passbolt/certs/cert.pem/etc/ssl/certs/certificate.key : /portainer/Files/AppData/Config/passbolt/certs/key.pem/etc/passbolt/gpg : gpg/etc/passbolt/jwt : jwt

Env vars

APP_FULL_BASE_URL=${PASSBOLT_URL}DATASOURCES_DEFAULT_HOST=passbolt-dbDATASOURCES_DEFAULT_USERNAME=${MYSQL_USER}DATASOURCES_DEFAULT_PASSWORD=${MYSQL_PASSWORD}DATASOURCES_DEFAULT_DATABASE=${MYSQL_DATABASE}EMAIL_DEFAULT_FROM_NAME=${EMAIL_FROM_NAME}EMAIL_DEFAULT_FROM=${EMAIL_FROM_ADDRESS}EMAIL_TRANSPORT_DEFAULT_HOST=${EMAIL_SMTP_SERVER}EMAIL_TRANSPORT_DEFAULT_PORT=${EMAIL_SMTP_PORT}EMAIL_TRANSPORT_DEFAULT_USERNAME=${EMAIL_USERNAME}EMAIL_TRANSPORT_DEFAULT_PASSWORD=${EMAIL_PASSWORD}EMAIL_TRANSPORT_DEFAULT_TLS=${EMAIL_TLS}

Restart

unless-stopped

Image details

Pulls: 27.0M

User: passbolt

Created: Jun 05, 2017

Updated: 6 days ago

Status: active

Installation

Ensure both Docker and Portainer are installed, and up-to-date
Log into your Portainer web UI
Under Settings → App Templates, paste the below URL
Head to Home → App Templates, and the list of apps will show up
Select the app you wish to deploy, fill in any config options, and hit Deploy

Template Import URL

https://raw.githubusercontent.com/Lissy93/portainer-templates/main/templates.json

Show Me

Service #1 - passbolt-db

docker run -d --name passbolt-db \
  -e 'PUID=${PUID}' \
  -e 'PGID=${PGID}' \
  -e 'MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}' \
  -e 'MYSQL_DATABASE=${MYSQL_DATABASE}' \
  -e 'MYSQL_USER=${MYSQL_USER}' \
  -e 'MYSQL_PASSWORD=${MYSQL_PASSWORD}' \
  -v /portainer/Files/AppData/Config/passbolt/db:/config \
  --restart=unless-stopped \
  linuxserver/mariadb:arm64v8-latest

Service #2 - passbolt

docker run -d --name passbolt \
  -p ${PASSBOLT_PORT}:443 \
  -e 'APP_FULL_BASE_URL=${PASSBOLT_URL}' \
  -e 'DATASOURCES_DEFAULT_HOST=passbolt-db' \
  -e 'DATASOURCES_DEFAULT_USERNAME=${MYSQL_USER}' \
  -e 'DATASOURCES_DEFAULT_PASSWORD=${MYSQL_PASSWORD}' \
  -e 'DATASOURCES_DEFAULT_DATABASE=${MYSQL_DATABASE}' \
  -e 'EMAIL_DEFAULT_FROM_NAME=${EMAIL_FROM_NAME}' \
  -e 'EMAIL_DEFAULT_FROM=${EMAIL_FROM_ADDRESS}' \
  -e 'EMAIL_TRANSPORT_DEFAULT_HOST=${EMAIL_SMTP_SERVER}' \
  -e 'EMAIL_TRANSPORT_DEFAULT_PORT=${EMAIL_SMTP_PORT}' \
  -e 'EMAIL_TRANSPORT_DEFAULT_USERNAME=${EMAIL_USERNAME}' \
  -e 'EMAIL_TRANSPORT_DEFAULT_PASSWORD=${EMAIL_PASSWORD}' \
  -e 'EMAIL_TRANSPORT_DEFAULT_TLS=${EMAIL_TLS}' \
  -v /portainer/Files/AppData/Config/passbolt/certs/cert.pem:/etc/ssl/certs/certificate.crt \
  -v /portainer/Files/AppData/Config/passbolt/certs/key.pem:/etc/ssl/certs/certificate.key \
  -v gpg:/etc/passbolt/gpg \
  -v jwt:/etc/passbolt/jwt \
  --restart=unless-stopped \
  passbolt/passbolt:latest-ce \
  /usr/bin/wait-for.sh,-t,0,passbolt-db:3306,--,/docker-entrypoint.sh

If the stack expects env vars, set them or add them to a .env file first.

version: "3.9"
services:
  passbolt-db:
    container_name: passbolt-db
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
    hostname: passbolt-db
    image: linuxserver/mariadb:arm64v8-latest
    networks:
      - passbolt_default
    restart: unless-stopped
    volumes:
      - /portainer/Files/AppData/Config/passbolt/db:/config

  passbolt:
    container_name: passbolt
    command:
      [
        "/usr/bin/wait-for.sh",
        "-t",
        "0",
        "passbolt-db:3306",
        "--",
        "/docker-entrypoint.sh",
      ]
    depends_on:
      - passbolt-db
    environment:
      APP_FULL_BASE_URL: ${PASSBOLT_URL}
      DATASOURCES_DEFAULT_HOST: passbolt-db
      DATASOURCES_DEFAULT_USERNAME: ${MYSQL_USER}
      DATASOURCES_DEFAULT_PASSWORD: ${MYSQL_PASSWORD}
      DATASOURCES_DEFAULT_DATABASE: ${MYSQL_DATABASE}
      EMAIL_DEFAULT_FROM_NAME: ${EMAIL_FROM_NAME}
      EMAIL_DEFAULT_FROM: ${EMAIL_FROM_ADDRESS}
      EMAIL_TRANSPORT_DEFAULT_HOST: ${EMAIL_SMTP_SERVER}
      EMAIL_TRANSPORT_DEFAULT_PORT: ${EMAIL_SMTP_PORT}
      EMAIL_TRANSPORT_DEFAULT_USERNAME: ${EMAIL_USERNAME}
      EMAIL_TRANSPORT_DEFAULT_PASSWORD: ${EMAIL_PASSWORD}
      EMAIL_TRANSPORT_DEFAULT_TLS: ${EMAIL_TLS}
    hostname: passbolt
    image: passbolt/passbolt:latest-ce
    networks:
      - passbolt_default
    ports:
    #  - 80:80
      - ${PASSBOLT_PORT}:443
    restart: unless-stopped
    volumes:
      - /portainer/Files/AppData/Config/passbolt/certs/cert.pem:/etc/ssl/certs/certificate.crt:ro
      - /portainer/Files/AppData/Config/passbolt/certs/key.pem:/etc/ssl/certs/certificate.key:ro
      - gpg:/etc/passbolt/gpg
      - jwt:/etc/passbolt/jwt

networks:
  passbolt_default:
      name: passbolt
      driver: bridge
  
volumes:
  gpg:
  jwt:

Or, use the original compose file, straight from the template repo. Deploy with:

git clone https://github.com/pi-hosted/pi-hosted
cd pi-hosted
docker compose -f stack/passbolt.yml up -d

For more installation options, see the Documentation in our GitHub repo

Container Documentation

passbolt-db Documentation

A Mariadb container, brought to you by LinuxServer.io.

passbolt Documentation

passbolt, password manager for teams

Check the logs first

Nine times out of ten the logs tell you exactly what went wrong.

In Portainer, go to Containers, click the container, then Logs. Or run docker logs <container>
Exit codes help too: 137 means killed, usually out of memory. 126 or 127 means the command inside the image is broken.

Permission denied on volumes

If the logs show "permission denied", the app can't write to its data folder on the host.

Fix the ownership: sudo chown -R ${PUID}:${PGID} /portainer/Files/AppData/Config/passbolt/db (and the same for the other mapped folders)
Or set the PUID and PGID variables (defaults ${PUID}:${PGID}) to match your own user, found with id $USER

Image won't pull

Test the pull directly on the host: docker pull linuxserver/mariadb:arm64v8-latest

"manifest unknown" means the tag no longer exists.
"toomanyrequests" is the Docker Hub rate limit. Log in with docker login to raise it.
"no space left on device" means a full disk. Reclaim space with docker system prune

"exec format error"

This means the image was built for a different CPU architecture than your server.

Check yours with uname -m: x86_64 is amd64, aarch64 is arm64. Raspberry Pi and other ARM boards are the usual culprits.

Container keeps restarting

The unless-stopped restart policy relaunches the app after every crash, so the real error can scroll past.

Check the logs right after a restart, the last few lines before it died are the useful ones.
Get the exit code with docker inspect <container> --format '{{.State.ExitCode}}'
Still stuck? Redeploy once with the restart policy set to no so the failure stays visible.

Stack won't deploy

Compose stacks fail fast on small mistakes, and Portainer shows the reason just above the editor.

YAML only accepts spaces for indentation, a single tab breaks the whole file.

Raise an issue

Found something which isn't working as it should? Here's how to report it.

Bug within the app: Open an issue within Passbolt's repo
Template not working: Open an issue on novaspirit/pi-hosted
This website not working: Open an issue on lissy93/portainer-templates

Similar apps

Adguard Other

Adguardhome (container) Other

Alpine Xfce4 noVNC Other

Arcane Tools

ArchiSteamFarm Other

Archivebox Other

Asciinema {shmolf} Tools

Authelia Other

Passbolt

Configuration

Notes

Pi-Hosted dedicated documentation: passbolt.md

Services

passbolt-db

Configuration

Image details

passbolt

Configuration

Image details

Installation

Via Portainer

Template Import URL

Docker Run

Service #1 - passbolt-db

Service #2 - passbolt

Docker Compose

Alternative Methods

Container Documentation

passbolt-db Documentation

passbolt Documentation

Troubleshooting

Check the logs first

Permission denied on volumes

Image won't pull

"exec format error"

Container keeps restarting

Stack won't deploy

Raise an issue

Similar apps