How to Install Passbolt Self-Hosted Password Manager on Debian 11

Passbolt is a free, open-source and self-hosted password manager that allows you to store your website and other passwords securely. It is an extensible and OpenPGP based password manager and is available in both a subscription-based and community edition. It also allows you to share your login credentials with your friends.

Features

  • Free and Open-source.
  • Supports OpenPGP cryptographic standard.
  • Simple and user-friendly interface.
  • Import and export passwords.
  • Add login credentials manually.
  • Share login credentials with your team.
  • Extensions are available for Firefox and Google Chrome.

In this tutorial, I will show you how to install the Passbolt password manager on Debian 11.

Prerequisites

  • A server running Debian 11.
  • A root password is configured on the server.

Getting Started

Before starting, it is recommended to update your system's package cache with the updated version of the package. You can update it with the following command:

apt-get update -y

Once you are done, you will also need to install some required dependencies to your system. You can install all of them with the following command:

apt-get install apt-transport-https ca-certificates curl gnupg-agent software-properties-common -y

Next, install the Certbot Let's Encrypt client with the following command:

apt-get install certbot python3-certbot-nginx -y

Once all the necessary packages are installed, you can proceed to the next step.

Add Passbolt Repository

By default, Passbolt is not available in the Debian 11 default repository. So you will need to add the Passbolt repository to your system.

First, add the GPG key with the following command:

apt-key adv --keyserver hkps://keys.mailvelope.com --recv-keys 0xDE8B853FC155581D

You should get the following output:

Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
Executing: /tmp/apt-key-gpghome.CHkhJsg8yu/gpg.1.sh --keyserver hkps://keys.mailvelope.com --recv-keys 0xDE8B853FC155581D
gpg: key DE8B853FC155581D: public key "Passbolt SA package signing key <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1

Next, verify your GPG key with the following command:

apt-key fingerprint 0xDE8B853FC155581D

If everything is fine you should see the following output:

Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
pub   rsa2048 2020-05-18 [SC] [expires: 2022-05-18]
      3D1A 0346 C8E1 802F 774A  EF21 DE8B 853F C155 581D
uid           [ unknown] Passbolt SA package signing key <[email protected]>
sub   rsa2048 2020-05-18 [E] [expires: 2022-05-18]

Next, add the Passbolt repository to APT with the following command:

echo "deb https://download.passbolt.com/ce/debian buster stable" | tee /etc/apt/sources.list.d/passbolt.list

Next, update the repository using the following command:

apt-get update -y

Once you are done, you can proceed to the next step.

Install Passbolt

Now, you can install the Passbolt by running the following command:

apt-get install passbolt-ce-server -y

During the installation, you will be asked to create a database for Passbolt:

Configure Passbolt

Select Yes and hit Enter. You will be asked to set a MySQL administrator user:

MySQL password

Provide root user and click on the Ok button. You will be asked to set MySQL root password:

Repeat password

Provide your root password and click on the Ok button. You will be asked to create a Passbolt database user:

Database user

Provide your database user and click on the Ok button. You will be asked to set a database password:

passbolt database password

Provide your database password and click on the Ok button. You will be asked to define your Passbolt database:

Database name

Provide your database name and click on the Ok button. You will be asked to set up an Nginx or Apache webserver:

Configure nginx

Select Yes and hit Enter. You will be asked to select installation type:

auto nginx setup

Select auto and click on the Ok button. You will be asked to provide your domain name:

Domain name

Provide your domain name and click on the Ok button. You will be asked to provide your email address for Let's Encrypt:

Let's encrypt email

Provide your email address and click on the Ok button. On the installation has been completed, you should get the following output:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://passbolt.linuxbuz.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/passbolt.linuxbuz.com/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/passbolt.linuxbuz.com/privkey.pem
   Your certificate will expire on 2021-12-31. To obtain a new or
   tweaked version of this certificate in the future, simply run
   certbot again with the "certonly" option. To non-interactively
   renew *all* of your certificates, run "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

 ===================================================================== 

   Well done! Visit https://passbolt.linuxbuz.com to finish installation 

 ===================================================================== 
Processing triggers for nginx-core (1.18.0-6.1) ...
Triggering nginx reload ...

Access Passbolt Web UI

Now, open your web browser and access the Passbolt using the URL https://passbolt.linuxbuz.com. You will be redirected to the following page:

UI configuration

Click on the Get Started. You should see the Passbolt welcome page:

System check

Click on the Start Configuration. You should see the database configuration page:

Database connection

Provide your database credentials and click on the Next button. You should see the following page:

OpenPGP Key

Provide your server name, email and click on the Next button. You should see the SMTP configuration page:

SMTP server settings

Provide your mail server details and click on the Next button. You should see the following page:

Options

Provide your server base URL, choose other preferences and click on the Next button. You should see the Admin user creation page:

Create an account

Provide your admin username and click on the Next button. You should see the following page:

Passbolt Browser extension

Now, you will need to install the Passbolt Chrome extensions to your system. Click on the Download extension button to install the Extensions then click on the refresh to detect extension. You should see the following page:

Select Passbolt passphrase

Define your passphrase and click on the Next button. You should see the following page:

Choose color

Pick any colour, enter three characters and click on the Next button. You should see the Passbolt dashboard on the following page:

Passbolt password manager

Conclusion

Congratulations! you have successfully installed Passbolt password manager with Let's Encrypt SSL on Debian 11. You can now store and share your website credentials easily from the web browser.

Share this page:

Suggested articles

0 Comment(s)

Add comment