I’m self-hosting a bitwarden instance and want to disable user registration. That does not mean, I don’t want any of my friends or family members to register; I just don’t want strangers/spam accounts to do so.
Currently, I’ll have to SSH into my server, enable registration, restart bitwarden, then wait for the new account to be created, hope nobody else uses this time window to create a new account, then SSH into my server again, disable registration again and restart bitwarden again. For every new account.
It seems, ignoring the disableUserRegistration setting in selected cases is possible:
While being able to invite new users to an organization is nice, I’d like to be able to do so without an organization for the instance itself.
- disableUserRegistration=true should be set
- If I invite a user via email, a user account should be allowed to register using that email
- The link in the email may only be valid for a certain amount of time (?)
- Bonus points if I can customize the text of the invitation email to include a GDPR link or something like that.
While sending an invite with a link would be the nicer way of doing this, whitelisting email addresses that are allowd to bypass the disableUserRegistration would also suffice.