Created complete configuration guide for Vaultwarden setup (450+ lines): Configuration Strategy: - Part A: SSH key setup (5 min) - Part B: Organization setup (25 min) - Part C: Security best practices - Part D: Cleanup and documentation Organization Structure: - Organization: Firefrost Gaming (Free plan, 2 users) - Users: Michael (owner) + Meg (admin/manager) - Collections: 6 total with granular permissions Collections Defined: 1. Server Credentials (Michael owner, Meg read-only) 2. API Keys & Tokens (Michael owner, Meg read-only) 3. Social Media Accounts (Both can edit) 4. Game Server Admin (Both can edit) 5. Billing & Financial (Michael owner, Meg read-only) 6. Staff & Shared Tools (Both can edit) Security Features: - SSH key authentication option - Two-factor authentication (2FA) setup - Strong master password policy - Secure password generator settings - Backup and recovery procedures Migration Process: - Step-by-step credential migration from personal vault - Verification of Meg's access - Cleanup of temporary credential files - Git repository sanitization Comprehensive troubleshooting for common issues. Unblocks: Scoped Gitea Token, all credential management workflows Ready to configure when Vaultwarden is deployed. Task: Vaultwarden Setup (Tier 1) FFG-STD-002 compliant
Vaultwarden - Add SSH Key & Org Setup
Status: Deployed, Needs Configuration
Owner: Michael "Frostystyle" Krause
Priority: Tier 1 - Security Foundation
Last Updated: 2026-02-16
Time Estimate: 30 minutes
Overview
Complete Vaultwarden configuration by adding SSH key for secure access and creating organization structure for shared credential management with Meg.
Service: Vaultwarden at vault.firefrostgaming.com
Current State: Deployed but not fully configured
Part A: Add SSH Key (5 minutes)
Add SSH key to Vaultwarden for secure credential access:
- Log into vault.firefrostgaming.com
- Navigate to Settings → Security Keys
- Add SSH key
- Test credential access
- Verify storage working
Part B: Organization Setup (25 minutes)
Create Organization
- Create "Firefrost Gaming" organization
- Plan: Free (2 users)
- Invite Meg via email
Create Collections
Organize shared credentials:
- Server Credentials (TX1, NC1, panels, etc.)
- Social Media Accounts (Discord, Twitter, etc.)
- Billing & Financial (Paymenter, payment processors)
- Game Server Admin (Pterodactyl, server panels)
Migrate Passwords
- Move shared passwords from personal vault to collections
- Assign appropriate permissions
- Test Meg's access to each collection
Cleanup
Delete temporary credential files from repo after migration
Success Criteria
- ✅ SSH key added and verified
- ✅ Organization created with 2 users
- ✅ 4 collections configured
- ✅ Shared passwords migrated
- ✅ Meg has access and can retrieve passwords
- ✅ Temp credential files deleted from Git
Blocks
This task blocks:
- Scoped Gitea tokens (need secure storage)
- All credential management workflows
- Meg's access to shared accounts
Fire + Frost + Foundation = Where Love Builds Legacy 💙🔥❄️