NixOS / foundation

This is the home of the NixOS Foundation
65 stars 15 forks source link

Get Bitwarden account for password management #74

Closed zimbatm closed 1 year ago

zimbatm commented 1 year ago

We need a better way than pass to share passwords.

zimbatm commented 1 year ago

I am in contact with their sales, and got this reply:

Of course and we do have a non-profit discount of 25% off our Teams and Enterprise licensing.

zimbatm commented 1 year ago

Bought 10 licenses (so we can add the infra and marketing team members), invited all the members. Waiting on everybody to accept:

zimbatm commented 1 year ago

/cc @NixOS/infra

zimbatm commented 1 year ago

/cc @NixOS/marketing - how many members do you have?

garbas commented 1 year ago

/cc @NixOS/marketing - how many members do you have?

zimbatm commented 1 year ago

Is it worth paying for all those accounts for shared credentials, or can we delegate it to the marketing leader(s)?

garbas commented 1 year ago

I thought this is the point of this to make it easier to share the credentials with the team (even between teams). I'm not sure I would want to have this account otherwise really or to put it differently, I don't think I will remember to use it since I will be sharing the access/credentials via other means.

nixos-discourse commented 1 year ago

This issue has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/2023-04-12-marketing-team-minutes/27249/1

garbas commented 1 year ago

Is there any progress on this and how should we handle credentials?

zimbatm commented 1 year ago

@garbas can you DM me all the emails that belong to the marketing team?

thufschmitt commented 1 year ago

It looks like most of the team members got access. Is there anything more to be done here?

vcunat commented 1 year ago

Put things into the vault? I don't know how Bitwarden works really, but I can see "NixOS Foundation vault" as empty.

zimbatm commented 1 year ago

Let's close the issue once @edolstra and @domenkozar have activated their account. We can then start transferring the passwords that we have in the private "pass" repo and deprecate that.

domenkozar commented 1 year ago

I have created the account, but the invitation link has expired.

zimbatm commented 1 year ago

Re-sent all pending invites

domenkozar commented 1 year ago

Done.