Update vaultwarden.sh

Use Argon2 to securely hash passwords and protect them against various types of attacks.

ct/vaultwarden.sh

@@ -65,7 +65,7 @@ function update_script() {
   UPD=$(whiptail --title "SUPPORT" --radiolist --cancel-button Exit-Script "Spacebar = Select" 11 58 3 \
     "1" "VaultWarden $VAULT" ON \
     "2" "Web-Vault $WVRELEASE" OFF \
-    "3" "Show Admin Token" OFF \
+    "3" "Set Admin Token" OFF \
     3>&1 1>&2 2>&3)
 
   header_info
@@ -121,11 +121,12 @@ function update_script() {
     exit
   fi
   if [ "$UPD" == "3" ]; then
-    DIR=/usr/bin/vaultwarden
+    if NEWTOKEN=$(whiptail --passwordbox "Set your ADMIN_TOKEN" 10 58 3>&1 1>&2 2>&3); then
-    if [ -d "$DIR" ]; then
+      if [[ -z "$NEWTOKEN" ]]; then exit; fi
-      cat /etc/vaultwarden.env | grep "ADMIN_TOKEN"
+      if ! command -v argon2 >/dev/null 2>&1; then apt-get install -y argon2 &>/dev/null; fi
-    else
+      TOKEN=$(echo -n ${NEWTOKEN} | argon2 "$(openssl rand -base64 32)" -t 2 -m 16 -p 4 -l 64 -e)
-      cat /opt/vaultwarden/.env | grep "ADMIN_TOKEN"
+      sed -i "s|ADMIN_TOKEN='.*'|ADMIN_TOKEN='${TOKEN}'|" /opt/vaultwarden/.env
+      systemctl restart vaultwarden
     fi
     exit
   fi