You need to use a password manager right now or maybe don't,
but seriously,
you do need one and you probably don't wanna give your passwords to another
company. I get that. So in this video,
I'm gonna show you how you can self-host your own password manager,
giving you godlike control of all your passwords.
And this thing's actually pretty sick. It's called pass bolt. It's free forever,
unlimited users, no strains attached,
and it really doesn't take much to get started. Here's what you need now,
because you're self-hosting it, you'll have to have somewhere to put it, right?
And that's gonna be a Lennox based server. But don't let that scare you.
That could be a spare laptop, a raspberry pie,
or my personal favorite and the best option, the cloud.
I love it because anyone can start right now and you already know my favorite
cloud provider, Leno, a cloud computing company by Akamai.
You don't need anything, just an account.
I'll walk you through that here in a moment.
But the cool part is no matter what option you choose on-prem in your house or
in the cloud, it's gonna be Docker based. So whatever I show you,
you can put it anywhere. And that's pretty much all you need. Actually, no,
I'm sorry. The most important thing,
you need coffee because everything in it requires coffee.
Now, before we start, I do wanna say this. I personally am business Ali .
Is that a word? No, it's not. Use dash Lane as my password manager.
That's a hosted password manager. That's a personal choice I feel good about,
but I know from any of you that's not gonna cut it.
You wanna self-host and have full control of your passwords. Let's get started.
Quick coffee break and we'll get going.
Let's go now if you haven't already,
go ahead and check out the link below for lin node le node.com/network Chuck.
And by the way, if you're new to Lin node,
you'll get a hundred dollars credit for 60 days if you use my link below.
So get signed up and signed in. Once you're logged in,
go ahead and click on create at the top left and click on Lin node.
Now for this project I'm gonna want Le Boon 2 22 0 4 lts.
I'll put it somewhere close to me. I'm in Dallas.
And then for the plan that you have a few options here,
I know Passal wants you to have at least two CPU cores to make it work great,
which means we're looking at the LE node four gigabyte plan.
Now I haven't tested with the lower plans yet. You know what?
I might actually do that at the end of the video. So I'll let you know if the
lower plans can work here in a moment. But for now,
I know for sure the four gigabyte plan will work.
It's also select that and notice the price real quick. Yes,
it'll be 20 bucks a month. It could be as low as five bucks a month,
but you're charged by the hour. So if you spin this up, test it for an hour,
it's gonna cost you how much 3 cents delete it. You're not charged anymore,
you're done. But anyways, now that I have my plan selected,
I'll scroll down just a bit more. I'll label this,
put a password in and click on create Len Quick Coffee break while baking.
And if you wanna watch it bake,
click on the launch Lich console on the right and you can watch the matrix be
created.
You'll know what's done baking when you have a running right here and you hit
the login prompt right here. I'm gonna close this LI window and now I'll want to
log into our fresh virtual machine in the cloud. To do that,
I'll copy my SSH access information over here, click on copy,
and then launch my terminal Windows, Mac, Linux. It's all the same.
I'll paste and enter, accept all fingerprints. Amen.
The first thing we'll do real quick, like always,
we'll start with a pseudo a P T update to update our repositories.
Next we'll install docker and docker compose.
So pseudo p t install docker.io,
docker dash compose dash y, let it happen. Good to go man.
It's so stinking fast.
Now we're gonna copy and paste some commands and I will have all these below.
First thing we'll do is make a directory for our project M K D I R.
And I'll call this pass bolt and then we'll CD into that directory.
CD pass bolt. Now I'm using W Get,
I'm gonna copy and paste this command by the way.
I'll have all those commands below.
We're gonna download the composed file from Pass Bolt Done. If we type in Ls,
there it is our composed file. Let's jump in there real quick.
I'll use Nano because it is the best. Everyone agrees. Nano Docker compose,
blah blah. And inside this file describes everything we're going to deploy.
It is two docker images, which will create two docker containers.
One will be the database for our passwords and then the other will be pass bolt,
the front end application. Now before we can bring this up,
there are a few things we have to change in this file.
First using our directional arrows, we'll scroll down just a bit.
And here in environment we'll need to change the app full base url.
This right here,
we'll want this to match what we have in Lin node. How do you find that though?
Let's go find it real quick. Getting back to Lin node,
we're gonna click on the network tab right here.
And what we're looking for is the reverse DNS or R DN S name.
This guy right here. We're gonna take that, copy it,
remove that pass bolt dot local, and paste that right in here. Perfect.
Now really this is all we need, like we're done, well kind of,
we are missing ssl. So as of now, when you launch this,
it will not have a trusted certificate. What you kind of want that.
So I am gonna show you how to set this up here in a moment.
But if you just wanna stop here and play with this, here's what you do.
Real simple, let's go ahead and save our file control X, Y, enter to save.
And then with one command, we can bring the sucker up, docker, dash compose,
do a dash F to specify our compose file, Docker compose,
blah blah blah. And then we'll do up dash d just like this.
And then let the magic happen If we do a docker PS to make sure it's alive.
There it is. And again, if you don't care about ssl, you can stop here.
Jump forward to the getting started section in this video and I'll show you what
to do next.
But for those of you who want to use this for real in the real world,
let's set up SSL. Now to activate the power of SSL on pass bolt,
we gotta do a few things. It's not too crazy, a lot of copy and paste,
but it's precise like playing operation.
Now first to activate SSL will have to add another service called trafic or
Traffic. I never know how to refer to this thing. This will handle all the ssl.
We're gonna add all those fun details to our existing Docker composed file. And
I've got a link below.
We're actually gonna copy and paste from this website here.
Pass bolt's own instructions. Can't go wrong there,
but it can get kind of confusing. So I'm gonna walk you through it,
but just make sure you have this document up and running and I'll show you what
to copy and paste from there.
Traffic will need us to create a few files to make things work, right?
We're actually gonna be adding three more files, but don't worry,
I'll walk you through it. Okay, now let's knock it out.
Let's jump back into our composed file. Or if you're already there,
just stay there.
And the first thing we'll do is add our trafic service to this composed file,
which will be its own container.
We're describing a new Docker container in this composed file.
So real quick for me,
if you haven't already open that webpage and you'll see this section add trafic
service to handle https. And here's the code. Lemme show you what to copy.
You're gonna want everything from here to here.
All this business right here is describing the Trafic service,
the Trafic Docker container. And notice it's gonna go the pass bolt service.
So I'll take that, copy it. And then over here in my compos file,
I'm gonna scroll down a bit.
Notice here's pass bolt and then all the stuff that describes him nested
underneath. So we're gonna go past all that. Let's keep going, keep going,
keep going until we're right underneath these comments or hashtags right here.
Now this is very important cuz the animal cares about your spacing.
Do this before you paste in there.
We're gonna hit tap one time over and then we'll paste our tra config.
God it, it should look just like this with this much space. And if you notice,
if you scroll up just a little bit, it should be in line with passable. Yep.
See passable has a little bit of space traffic has a little bit of space.
Now while we're here, notice one thing,
traffic will now be handling everything for HTTP and https s,
which means that pass bolt doesn't have to do that anymore.
So notice up here under pass bolt, we got a little duplicate.
They can't both handle those ports.
So let's take it out from pass bolt and let traffic handle that for us cuz he's
better at it.
So scroll up just a bit and we're gonna take out the entire port section for
traffic. Take that out, take that out,
take that out to where it looks just like this.
We've got the commands and then the hashtag stuff business right underneath
that, the comments. Now that wasn't so bad right now we're not quite done.
We're almost,
there's a few more things to copy and paste and this will be the last thing we
do here inside our composed file. Now looking at our past bolt documentation,
we're actually gonna scroll down a bit, kind of more towards the bottom.
Keep going, keep going until we see the section handle pass bolt with trafic.
With this step we're making trafic aware of the pass bolt service.
Like hey you're, you're helping this guy.
And if you scroll down just a little bit more,
you'll see the things we need to copy and paste.
And it's just gonna be from here to here.
It's the labels.
And notice it will be nested underneath the pass bolt service.
So let's go ahead and grab that, starting with labels here,
I'm gonna copy all that. Actually I lied. I said from there to there.
No it doesn't include traffic. Take that out. It stops right here. So again,
copying and pasting here, copy.
And then over here in our composed file we're gonna scroll up and kind of get
our bearings. So notice here's pass bolt and we'll need to nest the
labels underneath. Pass bolt. The pass bolt service.
So we'll score to the bottom of it until we get to command.
We're gonna add our labels underneath the command option.
So just scroll over a little bit and enter tab over
twice to make sure we're in line with command. And then paste that in there.
Perfect. It should look just like this.
Our labels nestled safely under command and still nestled underneath Pass
bolt. Now while we're here,
there are two things we gotta change with these labels.
Notice we have two instances of pass PT dot domain dot tld.
We'll want to change both of those to reflect our lin node rdns name or if
you're doing your own dns, just your own domain name.
So I'll go back to Le note and grab that real quick. I will remove passal dot
the name, whatever, replace it and then do the same thing down here.
Now at this point we are done with our Docker composed file.
We're done with surgery. We can save our business and get outta there.
Let's suture it up or close up. I don't know. I'm done with the surgery analogy.
Control X, Y enter to save. Good job doctor.
I wasn't done yet. Coffee break. Now this next part is easy.
We're just making files, copying and pasting.
Let's get back to our past vault webpage.
Scroll over the top a little bit and find the section where it says
configuration files. Right here, right here.
Our first step is creating our trafic dot yammel file.
Good news is we don't have to change anything with that file.
All we have to do is copy and paste everything you see in this box. So I'm gonna
grab all of that.
And what this is doing is telling Trafic to grab a free certificate from Let's
Encrypt, which is amazing. So copy that. We'll go over here,
type in nano trafic y aml,
Yael, and just paste your file. Should look just like this. Actually,
you know I lied. There is one change we have to make here.
If you scroll down to the bottom, I know guys, I'm sorry.
You'll see a spot for email when Trafic goes out there and tries to get a
certificate from Let Encrypt,
it will need an email address and all you gotta do is put in yours right here.
So I'll take out your name at domain dot tld and just put in a, put an name,
email address in you know what to DOL x Y enter to save tra if's Done.
File one is done. Now we have two more files before we make the files,
we need to make a new directory. Let's do that right now. NK d i r.
And we're gonna call that conf. C O N F. Hit enter.
Now we're gonna jump into that directory. CD, C O N F, CD conf we're in.
If we get back to our pass bolt documentation,
we're gonna scroll in just a bit here.
The first file we're gonna create is headers dot y aml, this guy right here.
And we're simply gonna copy everything from here.
And this one really doesn't need any changes I think. Yes,
I don't wanna lie to you again. So let's copy this.
Go make our new file nano headers dot y aml and paste the
contents. That's it. Control x, y enter to save. That part's done.
One more file to go.
Scroll down just a little bit one more time. And we have TLS dot yammel.
Same story. Copy everything you see here, no changes.
Copy nano tls dot y,
AML paste, all that business control X, Y enter to save. Yeah,
we're done. Now let's go up one directory, cd.dot. There's our files.
And before we bring this up,
let's talk about the magic we just did because it's pretty cool.
Within the stalker compost file,
we are describing the creation of three separate docker containers.
First our database, which is Mariah db. This will store our passwords.
It's also describing the pass bolt application. And finally what we just did,
traffic which will handle all our http, https s traffic,
including giving us a SSL cert from Let's Encrypt. Now if you're like docker,
Docker compose, what is all this magic cuz it is magic.
I've got videos describing these things.
We have geek out and have a lot of fun. Check them out up here somewhere.
I never know where to point. And then we'll bring it all up with one command.
Docker dash compose. We'll do dash F to specify our docker compose file,
Docker compose, blah blah blah. It's right there.
We'll type in up to bring it up and we'll do dash D to make it a Damon to make
it run in background. Ready, set, go. And that's it. That was pretty quick.
And we do a docker PS.
We should see our three docker containers running.
Now we're at the point where we're getting started.
We're configuring this Passal we created.
The first step is to add our first admin user,
which will be a fancy command we'll have to grab from pass Papo. Now link below.
I will have a link below to uh, the Papel documentation for Docker.
I'll show you what to copy and paste. Scroll down just a bit.
You'll see step five, create your first admin user.
We're gonna copy all of that. Notice that there's a docker compose command.
Paste that into our terminal.
But there is one thing we have to change and you can use your side arrow to get
up there.
Notice where it says your email.com and your name and surname.
You want that to be you, your first admin user, right?
So we'll change your email to be your email and then your name and your last
name and that's it. Hit enter and user created. Now here,
notice it's spit out a URL for us to get started. We're gonna take that url,
copy it, open up our browser and navigate out there.
And notice we do need to add an extension. Go ahead and do that right now.
Download extension for Firefox. That's what I'm using right now. Yeah, yeah,
yeah. Add to it. Blah blah blah. Add.
And now we're at the point where we're doing standard password management stuff.
Put a passphrase in, make sure you have your recovery kit downloaded.
This is actually kind of cool. Um,
it's a unique thing that you can put in there.
Just pick something that you know you did and it'll protect you from
phishing attacks. Kind of cool And that is it .
I know it was a lot actually, but that's the price you pay for protection.
Now again, we're talking about standard password management software.
I'm not gonna walk you through every feature but things you should know.
It has first of a go to administration at the top.
We can make sure that multi-factor is enabled.
You can do time-based one time passwords with any application you can think of.
So think Google Authenticator, UBI Key Duo. So whatever, set this up.
That way you've got multifactor authentication.
When you log into your password manager, which is kind of important,
having just a passphrase isn't the most secure.
And this is actually a recent feature they've added.
This is pretty simple to set up. Also, you can do email notifications,
which you'll probably want to do if I go to email server settings here.
You can connect this with your email provider. Google Mail. Google Workspace,
a bunch of stuff. I'm not gonna cover that here.
They do have great documentation for that and it's, there's so many options.
If I showed you one, you'd be like, Hey, what about Office 365?
Just they have a thing. So actually I wanna test a password real quick. Let,
let me add the one for LE Node. I'll create a new one.
node.com create. And now when we go to Le node and we're logged out,
I can use Pass Bolt too. Well log in. Perfect.
A pass Bolt does have apps for pretty much everything, including your phone.
Where's my phone? Oh there it's um, set that up. We can do this.
I'll go to my profile at top, right? Go to mobile apps, click on start, uh,
pass, raise, continue curse their security.
And all I gotta do is scan that craziness right there.
Let me download the app real quick. Just gonna scan that Crazy looking QR code.
That's one of the crazier ones I've seen. Whoa, it's changing ,
it was changing cause I was scanning it. That was cool.
I've never seen that before. And I gotta put my passphrase in once more.
I can use Face ID and there we go.
Password manager that I'm self-hosting on my own stuff and it doesn't feel like
a self-hosted application if you know what I mean.
This is legit. It feels good like a professional real application.
And that's why I was so excited to make this video because it,
it is a real thing and they use real security.
You can feel good about this and they're very transparent about how they keep
you secure. They're using open PGP for encryption, full private key control,
end-to-end encryption, all kinds of stuff. And they're regularly audited.
So that's a good thing. So again,
I personally do not use Pass Vault because I like my hosted solution.
For me it's a matter of convenience, but I know for a lot of you, again,
not good enough in this solution, I think is killer.
Now here we are at the end of the video and there's one more thing I promised
you. Hey, can we go to a lower LE node plan,
like the $5 plan and still make this work? Let's try it out.
I'll go in here and make a smaller le node, the n node one gigabyte.
Keeping in mind if you go smaller,
you probably can't support as many people all at once. That's how servers work,
right? I'll spin that up real quick.
Install docker copy on the files to make it easier.
And let's see if everything works here. So far so good.
It hasn't done anything yet, but it's so far so good. Okay,
containers are running. I'm gonna set up my admin user real quick. ,
I'm like, why isn't this working? I, I forgot the domain is jacked up. Hold on.
, I'm so dumb. Let me jump into the, uh,
network chuck browser to make sure I have a clean browser extension to work
with. Let's get a fresh Firefox real quick.
Fresh Firefox at 10 times fast. So the smallest LE node seems to work just fine.
Grandma, go subscribe to network. Chuck.
What are you doing?