1
Step 1Open the server Apps tab
Select your VPS, open the Apps tab, and start a new app deployment. Keep sensitive server details hidden before capturing or sharing screenshots.
Back to all templates
Passbolt
Application512MB+ RAM
Open-source password manager for teams
passwordsecurityteam
Deploy Passbolt in 3 Steps
1
Connect Your VPS
Add your server credentials to Server Compass
2
Select Passbolt
Choose from our template library
3
Deploy & Configure
Fill in settings and click Deploy
No Docker knowledge required
Step-by-step deployment guide
Deploy Passbolt on a VPS with Server Compass
Use the Passbolt template in Server Compass to deploy a self-hosted team password manager with MariaDB on your VPS, then verify the Passbolt web UI in a browser.
About 7 minutesBrowser verified
2
Step 2Choose an app template
Click New App and choose the template deployment path so Server Compass can load the built-in catalog.
3
Step 3Search for Passbolt
Use the template picker search to find Passbolt in the Server Compass template catalog.
4
Step 4Select the Passbolt template
Choose the Passbolt template. Server Compass fills in the Passbolt web service, MariaDB database, generated database passwords, HTTPS port, HTTP port, and app URL.
5
Step 5Review the Passbolt settings
Confirm the app name and compose services. In this run, the app was named passbolt-demo and used host port 3000.
6
Step 6Deploy Passbolt
Review the generated environment values, confirm the port is available, and click Deploy Now.
7
Step 7Watch the deployment progress
Keep the deployment modal open while Server Compass uploads the compose file, pulls the Passbolt image, starts the container, and verifies the stack.
8
Step 8Confirm Passbolt is running
After deployment finishes, return to the Apps tab and confirm the Passbolt app is marked Running with its application URL available.
9
Step 9Open Passbolt in the browser
Open the application URL in a browser. The Passbolt web UI confirms the password manager is reachable.
After Passbolt Opens
- Create the first admin account and configure email before inviting team members.
- Use a real domain with HTTPS for production Passbolt deployments.
- Back up the Passbolt GPG, JWT, and MariaDB volumes before storing production passwords.
Passbolt deployment questions
What does the Passbolt template deploy?
It deploys Passbolt Community Edition with a MariaDB database, GPG key volume, and JWT key volume.
Which port did the tutorial use?
The tutorial used host port 3000, which maps to the Passbolt web service on container port 443.
Why does the guide stop at the login or setup web UI?
The tutorial verifies the clean Passbolt web UI because account creation, email delivery, browser extension setup, and team permissions depend on the production instance.
Should this become a blog post?
No. The deployment guide should live on the Passbolt template detail page and be linked from the reusable template deployment docs page.
Do It Yourself
Deploy Passbolt via Command Line
Prefer the command line? Follow this step-by-step guide to deploy Passbolt manually on your VPS.
1
Access Your VPS via Terminal
Open a terminal session and log into your VPS. Replace the placeholder with your actual IP.
terminal
# Connect via SSH
ssh root@your-vps-ip
# Alternative with key file
ssh -i /path/to/key root@your-vps-ipFirst time? Make sure Docker is installed on your VPS. Run: curl -fsSL https://get.docker.com | sh
2
Set Up Project Folder
Create a workspace for your deployment files.
terminal
# Create and navigate to project directory
mkdir -p ~/apps/passbolt
cd ~/apps/passbolt3
Create the Compose File
Configure your containers with this Docker Compose setup:
docker-compose.yml
services:
passbolt:
image: passbolt/passbolt:latest-ce
ports:
- "443:443"
- "80:80"
environment:
- DATASOURCES_DEFAULT_HOST=db
- DATASOURCES_DEFAULT_DATABASE=passbolt
- DATASOURCES_DEFAULT_USERNAME=passbolt
- DATASOURCES_DEFAULT_PASSWORD=<your-db-password>
- APP_FULL_BASE_URL=<your-app-url>
volumes:
- passbolt_gpg:/etc/passbolt/gpg
- passbolt_jwt:/etc/passbolt/jwt
restart: unless-stopped
depends_on:
db:
condition: service_healthy
db:
image: mariadb:11
environment:
- MARIADB_ROOT_PASSWORD=<your-db-root-password>
- MARIADB_DATABASE=passbolt
- MARIADB_USER=passbolt
- MARIADB_PASSWORD=<your-db-password>
volumes:
- mariadb_data:/var/lib/mysql
restart: unless-stopped
healthcheck:
test: ["CMD-SHELL", "healthcheck.sh --connect --innodb_initialized"]
interval: 10s
timeout: 5s
retries: 5
volumes:
passbolt_gpg:
passbolt_jwt:
mariadb_data:
Configuration Variables
PORTHTTPS port(default: 443)HTTP_PORTHTTP port(default: 80)APP_URLApp URLDB_PASSWORDDB passwordDB_ROOT_PASSWORDRoot password4
Deploy Your Stack
Spin up the containers and verify the deployment.
terminal
# Start all services
docker compose up -d
# List running containers
docker compose ps
# Watch the logs
docker compose logs -f5
Update Firewall Settings
Allow incoming traffic on the application port.
terminal
# Allow the application port through firewall
sudo ufw allow 443/tcp
sudo ufw reload
# Access your app at:
# http://your-server-ip:443Skip the Terminal
Skip the terminal. Use Server Compass instead.
Deploy Passbolt with a beautiful UI instead. No SSH, no YAML editing, no terminal commands. Just click, configure, and deploy in under 3 minutes.
- Beautiful interface
- One-click deploys
- Let's Encrypt SSL
- Zero downtime
- Container monitoring
- Easy rollbacks
Download Server Compass$29 one-time • Lifetime license
After Deployment
After deploying Passbolt with Server Compass, complete these steps to finish setup
1
Create first admin user
2
Install browser extension
3
Invite team members
Need help? Check out our documentation for detailed guides.
Passbolt FAQ
Common questions about self-hosting Passbolt
How do I deploy Passbolt with Server Compass?
Simply download Server Compass, connect to your VPS, and select Passbolt from the templates list. Fill in the required configuration and click Deploy. The entire process takes under 3 minutes.
What are the system requirements for Passbolt?
Passbolt requires a minimum of 512MB RAM. We recommend a VPS with at least 1024MB RAM for optimal performance. Any modern Linux server with Docker support will work.
Can I migrate my existing Passbolt data?
Yes! Server Compass provides volume mapping that allows you to import existing data. You can also use standard Passbolt backup and restore procedures.
How do I update Passbolt to the latest version?
Server Compass makes updates easy. Simply click the Update button in your deployment dashboard, and the latest Passbolt image will be pulled and deployed with zero downtime.
Is Passbolt free to self-host?
Passbolt is open-source software. You only pay for your VPS hosting (typically $5-20/month) and optionally Server Compass ($29 one-time). No subscription fees or per-seat pricing.
Ready to Self-Host Passbolt?
Download Server Compass and deploy Passbolt to your VPS in under 3 minutes. No Docker expertise required.
Download Server Compass