kensonman/passbolt-exporter repository overview

⁠passbolt-exporter

The simple project to build the docker image used to export the passbolt secrets into the KeePassX (v2.x) format.

It will retrieve the password from passbolt thru passbolt-python-api⁠ and export the KeePass file with pykeepass⁠.

Please refer to the project home page⁠ for more details.

⁠Usage

docker run --rm \
  -v /path/to/server/public-key.asc:/keys/serverpubkey.asc:ro \
  -v /path/to/user/private-key.asc:/keys/userprvkey.asc:ro \
  -v /path/to/user/public-key.asc:/keys/userpubkey.asc:ro \
  -v /path/to/output/folder:/output/:rw \
  -e ENDPOINT=https://passbolt.local \
  -e SERVER_PUBLIC_KEY=/keys/serverpubkey.asc \
  -e USER_PRIVATE_KEY=/keys/userprvkey.asc \
  -e USER_PUBLIC_KEY=/keys/userpubkey.asc \
  -e USER_FINGERPRINT=xxxxyyyyzzzz... \
  -e OUTPUT_KEY_FILE="" \
  -e OUTPUT_PASSPHRASE=passphrase-for-encrypt-decrypt-kdbx-file \
  -e OUTPUT_FILE=/output/output.kdbx \
  -e LOGLEVEL=INFO \
  -it kensonman/passbolt-exporter:latest

⁠Environment Variables

• ENDPOINT - The passbolt endpoint
• SERVER_PUBLIC_KEY - The public key for the passbolt endpoint
• USER_PRIVATE_KEY - The user private key for the passbolt account
• USER_PUBLIC_KEY - The user public key for the passbolt account
• USER_FINGERPRINT - The fingerprint to make sure the account accancy. Optional
• USER_PASSPHRASE - The passphrase to decrypt the gpg private key
• OUTPUT_KEY_FILE - The key file to encrypt/decrypt the kdbx file. Optional
• OUTPUT_PASSPHRASE - The passphrase to encrypt/decrypt the kdbx file. Optional
• OUTPUT - The output file
• LOGLEVEL - The logging level when exporting. Refer to Python Logging.Level⁠ for more detail.

⁠See

• passbolt-python-api⁠
• pykeepass⁠
• python-gnupg⁠
• gnupg⁠