foundation_keychain 0.1.2

Bitwarden-compatible vault + SSH key provisioning built on foundation_db and foundation_auth
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

# foundation_keychain — native Bitwarden-compatible vault server.
#
# Build from the WORKSPACE ROOT (path dependencies need the whole workspace):
#   docker build -f backends/foundation_keychain/Dockerfile -t foundation-keychain .
#
# Run:
#   docker run -p 8080:8080 -v keychain-data:/data foundation-keychain

FROM rust:1.87-bookworm AS builder
# turso_core + boring-sys build deps.
RUN apt-get update && apt-get install -y --no-install-recommends \
        cmake clang libclang-dev perl pkg-config \
    && rm -rf /var/lib/apt/lists/*
WORKDIR /build
COPY . .
RUN cargo build --release -p foundation_keychain --bin keychain

FROM debian:bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates \
    && rm -rf /var/lib/apt/lists/*
COPY --from=builder /build/target/release/keychain /usr/local/bin/keychain
ENV KEYCHAIN_DB=/data/keychain.db
ENV LISTEN_ADDR=0.0.0.0:8080
EXPOSE 8080
VOLUME /data
ENTRYPOINT ["keychain"]