Update bitwardenrs/server-mysql Docker tag to v1.19.0

[renovate]

This PR contains the following updates:

Package	Update	Change
bitwardenrs/server-mysql	minor	1.14.2 -> 1.19.0

---

Release Notes

dani-garcia/bitwarden_rs

v1.19.0

Compare Source

• Updated the admin interface:
  • Added diagnostic and debug information.
  • Added option to sort users by date.
  • Added ability to modify a user's type in an organization and to delete the whole organization.
• Added support for the Personal Ownership policy, which when enabled disables the use of the personal vault to non-admin users of an organization.
• Improved shutdown behavior on Docker images, now should handle SIGTERM better.
• Basic experimental support for LDAP import using the official Directory Connector.
  • Note that users can't be created by this tool, it only can add or remove them from an organization.
  • Autoimported users join the organization with user level and they need to be confirmed by an admin or owner from the web vault. If SMTP is enabled, users will need to accept the email invitation beforehand.
  • Important: enabling the checkbox "Overwrite existing organization users..." in the Directory Connector can cause already existing users from the organization to be removed when syncing if they aren't present in the LDAP server, while the official server differenciates between manually added and autoimported users, and won't delete the manually added ones. This only applies to the user level, and not to managers, admins or owners, and will probably be changed in the future to align with upstream.
• Updated web vault to 2.18.1.
• Docker images are now built with docker buildx, which results in correct platform metadata.
• Added opencontainers.org labels to Docker images.
• Synced global domains data with upstream.

v1.18.0

Compare Source

• Config values can now be defined in a file, use <CONFIG_NAME>_FILE to point to it.
  • For example, if you save the admin token to /etc/bitwarden_rs/token, you can use ADMIN_TOKEN_FILE=/etc/bitwarden_rs/token and it will read the file and set the token to it's contents.
• Users can be enabled/disabled from the admin panel.
• Implemented manager role.
• Now the .env file parsing won't fail silently.
• Fixes to the email format and processing, added option to enable debugging via SMTP_DEBUG, and added options to ignore certificate issues.
• The user's last active device date is shown on the admin page.
• Now cipher updates are validated when they provide a revision date, which will prevent multiple clients from overwriting each other's changes.
• Updated web vault to 2.17.1.
• Improved icon downloading in some edge cases.
• Fixed key rotation during password change.
• Make sure organization policies don't affect users that aren't a part of it or aren't confirmed.
• Make sure removing a user from an org doesn't also remove them from accessing other orgs.
• Return 404 when an icon is missing instead of a fallback, allowing the clients to use their own fallback icon.
• Add missing admin endpoints for deleting ciphers.
• Updated dependencies.

v1.17.0

Compare Source

New docker multi database support and MySQL/PostgreSQL support for ARM 🎉

Only one image: bitwardenrs/server

It contains support for SQLite, MySQL and PostgreSQL all in one! Supports AMD64, ARMv6, ARMv7 and ARMv8 (Aarch64), and all architectures support all database backends!.

Note, the old separate images for MySQL and PostgreSQL will be kept updated for the time being, but it's recommended to migrate when possible.

Which tag to use:

• bitwardenrs/server:latest: Tracks the latest released version (i.e., tagged with a version number). Recommended for most users, and generally the most stable.
• bitwardenrs/server:testing: Tracks the latest commits to the source repository. Recommended for users who want early access to the newest features or enhancements. Generally pretty stable, but occasional issues are unavoidable.
• bitwardenrs/server:x.y.z: Represents a specific released version. Prefer to use latest to keep up-to-date.

Note about ARMv6

• Docker seems to have some issues with architecture detection on ARMv6, so if you have trouble in that case, use these tags instead: bitwardenrs/server:arm32v6, bitwardenrs/server:testing-arm32v6, bitwardenrs/server:x.y.z-arm32v6

Alpine base

• bitwardenrs/server:alpine, bitwardenrs/server:testing-alpine, bitwardenrs/server:x.y.z-alpine: Functionally the same as the above images, but based on Alpine instead of Debian, which results in a smaller image. Only supported for SQLite and the AMD64 and ARMv7 architectures.

Changelog

• Docker alpine image now also works for armv7.
• Docker MySQL and PostgreSQL images now also work on armv6, armv7 and armv8-64.
• Multiple database support, now you can compile with cargo build --features sqlite,mysql,postgresql or any combination of them.
• Now the initial database connection doesn't fail instantly when there's an error, but retries for up to 15 times by default, adjustable with the DB_CONNECTION_RETRIES option.
• Sessions are properly invalidated now when changing email, password or kdf parameters.
• Items are not shown to organization admins in their user view when they don't have their collection selected. Note that they still appear in the organization view.
• Allow multiple SMTP auth mechanisms.
• Favorite status in organization items is now tracked at the user level.
• Fix admin page when DOMAIN is not configured, or configured incorrectly.
• Update web vault to 2.16.1
• Add vendored_openssl feature, to statically link OpenSSL, disabled by default.
• Updated dependencies and synced global domains file with upstream.

v1.16.3

Compare Source

• Fixed mysql and postgresql releases not building correctly
• Added support for restricting org creation to certain users: Examples
• Syncronized global_domains.json with upstream

v1.16.1

Compare Source

• Log timestamps with milliseconds by default and added option LOG_TIMESTAMP_FORMAT to customize the format
• Added back arm32v6 tag in docker images, because docker doesn't select the architecture correctly from the multiarch image (Exit Code 139 with new docker multiarch on Pi Zero W dani-garcia/vaultwarden#1064)

This release is also using docker multiarch images, check the Wiki page or the 1.16.0 release notes for info on how to migrate to it.

v1.16.0

Compare Source

New docker multiarch support, please read the following if you use the docker images:

The docker images have been modified to make use of the multiarch support, which means there's no need to use architecture specific tags anymore, and those will not be updated in the future.

Make sure you update your images correctly following the table at the end!

Changelog

• Add support for hiding passwords in a collection
• Allow postgres:// DATABASE_URL
• Add option to set name during HELO in email settings
• Add startup script to support init operations
• Use local time in email notifications for new device logins
• Updated dependencies and included web vault
• Removed unstable dependencies in preparation for rocket stable
• Docker multiarch support

Docker multiarch transition guide

Old	New	Comments
bitwardenrs/server	bitwardenrs/server:testing	This follows the latest commits to the repository. Should be pretty stable for most use cases.
bitwardenrs/server:latest
bitwardenrs/server:raspberry
bitwardenrs/server:armv6
bitwardenrs/server:aarch64
bitwardenrs/server:1.xx.x	bitwardenrs/server:latest	This follows the latest tagged release, a bit older than testing but a bit more stable as well. Can also use bitwardenrs/server:1.xx.x for a specific version (without the arch tag), but make sure to check for updates frequently.
bitwardenrs/server:1.xx.x-raspberry
bitwardenrs/server:1.xx.x-armv6
bitwardenrs/server:1.xx.x-aarch64
bitwardenrs/server:alpine	bitwardenrs/server:testing-alpine	Like the new bitwardenrs/server:testing, uses Alpine base.
bitwardenrs/server:1.xx.x-alpine	bitwardenrs/server:alpine	Like the new bitwardenrs/server:latest, uses Alpine base. Can also use bitwardenrs/server:1.xx.x-alpine for a specific version (without the arch tag), but make sure to check for updates frequently.
bitwardenrs/server-[mysql,postgres]	bitwardenrs/server-[mysql,postgres]:testing	Like the new bitwardenrs/server:testing, for the MySQL and Postgres databases.
bitwardenrs/server-[mysql,postgres]:latest
bitwardenrs/server-[mysql,postgres]:1.xx.xx	bitwardenrs/server-[mysql,postgres]:latest	Like the new bitwardenrs/server:latest, for the MySQL and Postgres databases. Can also use bitwardenrs/server-[mysql,postgres]:1.xx.x for a specific version, but make sure to check for updates frequently.

v1.15.1

Compare Source

• Fixed error when cloning attachments with ciphers, note that attachments are not cloned
• Fixed version check when a commit hasn't been made since the last release
• Added openssl extern crate to fix some builds
• Updated admin page, added attachments count per user and users count per organization and fixed issue with DNS not resolving

v1.15.0

Compare Source

IMPORTANT: This is a required update when using newer clients, otherwise the delete functionality won't work

• Added support for soft deletion of items (trash functionality)
• Redesigned admin page:
• Separated into multiple pages
  • Icon to indicate users verified emails, and counter of the number of items they have
  • Added diagnostics page
• Updated web vault to 2.14
• Added IP address to the logs on TOTP failure, alowing fail2ban use
• Some email and domain whitelist fixes
• Fixed issue deleting notes in PostgreSQL
• Updated dependencies and other bug fixes

---

Renovate configuration

📅 Schedule: "after 10am and before 3pm every weekday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by WhiteSource Renovate. View repository job log here.