vitapavlik/keepass-server
Watch
1
0
Fork
You've already forked keepass-server
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
File server for Keepass client written in Flask
20 commits 1 branch 0 tags 45 KiB
  • Python 98.7%
  • Shell 1.3%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Vít Pavlík 2dc057eb5a
 fix previous commit
2026-08-20 19:09:25 +02:00
.gitignore update gitignore 2026-08-20 18:36:17 +02:00
backup.py implement functionality 2025-07-23 20:59:50 +02:00
config.py implement functionality 2025-07-23 20:59:50 +02:00
gunicorn-config.py more boilerplate 2025-07-23 20:43:55 +02:00
kpserver-template.service add service file 2025-09-26 00:15:12 +02:00
main.py fix previous commit 2026-08-20 19:09:25 +02:00
README.md update readme (keepass2android 1.14) 2025-10-07 00:23:42 +02:00
requirements.txt add requirements.txt 2026-08-20 18:35:01 +02:00
start.sh change to python 3.13 2025-09-03 19:18:17 +02:00
sync.py implement functionality 2025-07-23 20:59:50 +02:00
wsgi.py begin with boilerplate 2025-07-23 20:42:04 +02:00

README.md

HTTP server for a keepass database

This server is a simple file server for one file (the keepass password database).

Keepass 2.59 windows client saves the database over HTTP(S) like this:

GET    /passwords-personal.kdbx HTTP/1.1" 200 -
PUT    /passwords-personal.kdbx.tmp HTTP/1.1" 200 -
GET    /passwords-personal.kdbx HTTP/1.1" 200 -
DELETE /passwords-personal.kdbx HTTP/1.1" 200 -
MOVE   /passwords-personal.kdbx.tmp HTTP/1.1" 200 -
GET    /passwords-personal.kdbx HTTP/1.1" 200 -

On the other hand, Keepass2Android 1.14-r1 only does:

GET  /passwords-personal.kdbx              HTTP/1.0" 200 -
PUT  /passwords-personal.kdbx.tmp.12533843 HTTP/1.0" 200 -
MOVE /passwords-personal.kdbx.tmp.12533843 HTTP/1.0" 200 -

This server works for both Keepass windows client and Keepass2Android.

Note

The MOVE method is part of WebDAV (HTTP extension for file management). It includes a Location header that specifies the destionation to move to.

This server is made to fulfill these requests made by a Keepass client but nothing more.

Features

There are callbacks for

  • backing up the database before overwriting
  • synchronization with external location (like rclone-mounted google drive location)

Deployment

  • Adjust the filenames and locations in config.py.
  • Start the server by running start.sh.
    • You're going to need Python3.12 or newer with packages flask and gunicorn.
  • Configure reverse proxy with nginx or a web server of your choice.

Caution

When exposing this server to the internet, make sure to setup a reverse proxy to protect the access with HTTP Auth (nginx auth_basic directive) and TLS (certbot)!

When is this useful?

Imagine you're unable to install google drive software to your company laptop. This is where it's beneficial to have the database accessible by HTTPS (with authentication, of course - this is within Keepass capabilities). On your server, the database can be synchronized back to google drive with rclone.