{"repo":"Turbootzz/Vaultwarden-API","free":true,"listed":false,"github":"https://github.com/Turbootzz/Vaultwarden-API","clone":"git clone https://github.com/Turbootzz/Vaultwarden-API.git","description":"Self-hosted secrets API for Vaultwarden","language":"Go","stars":41,"topics":["api","bitwarden","devops","docker","golang","homelab","secrets-management","security","selfhosted","vaultwarden"],"license":"MIT","category":"self-hosted-apps","readme_excerpt":"🔐 Vaultwarden API Stop using .env files. Fetch secrets directly from your self-hosted Vaultwarden instance at runtime. A lightweight, production-ready Go API that acts as a secrets bridge between your apps and Vaultwarden. No more scattered .env files, no more accidentally committed credentials. ✨ Highlights - 🚀 Zero external dependencies — Pure Go binary, no Node.js, no Bitwarden CLI - 🔒 Native Bitwarden crypto — AES-256-CBC + HMAC-SHA256, PBKDF2/Argon2id key derivation - ♻️ Auto token refresh — Never worry about expired sessions again; if the session is invalidated server-side (restart, token revocation), the service automatically performs a full re-login instead of serving a stale cache - 📦 20MB Docker image — Alpine-based, runs as non-root - 🛡️ Defense in depth — API key auth, IP whitelisting, rate limiting, security headers - ⚡ Background vault sync — Secrets always up-to-date (configurable interval) - 🏭 Production-ready — Health checks, graceful shutdown, structured logging Architecture How it works under the hood: 1. Authenticates with Vaultwarden using your master password (same as the web vault) 2. Derives encryption keys using PBKDF2-SHA256 or Argon2id (server-negotiated) 3. Decrypts your vault items in-memory using AES-256-CBC 4. Serves secrets via a simple REST API with API key authentication 5. Periodically re-syncs the vault and auto-refreshes auth tokens Quick Start 1. Pull and run with Docker 2. Fetch a secret That's it. Your app reads secrets from the A","default_branch":null,"files":null,"tree":[],"storefront":"/r/Turbootzz","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Turbootzz/Vaultwarden-API/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}