Official Bitwarden Self-Hosted in the Netherlands
The Netherlands gives an official Bitwarden install the best peering latency in Europe (AMS-IX) plus a strict GDPR regulator and no compelled key disclosure law. The official self-hosted server is a .NET multi-container stack with MS SQL Server underneath; it needs 6 GB RAM minimum and the IOPS to keep MS SQL transaction logs flushed. This guide covers picking an Anubiz Host Netherlands dedicated tier, walking through the installer, SSO configuration via OIDC, and snapshotting MS SQL plus attachments to a second offshore region.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Why Netherlands
AMS-IX peering keeps latency under 10 ms to London, Brussels, Paris and Frankfurt and under 40 ms to most of central and eastern Europe. Dutch DPA fines have teeth; access compulsion requires clear lawful basis. No key escrow. Telecommunications Act 13.2a applies to telco providers, not to hosting customers. Combination gives you cloud-level latency without the cloud surveillance exposure.
Plan Sizing
The Anubiz Host Netherlands VPS top tier does not clear the 6 GB RAM floor with headroom. Move to an Anubiz Netherlands Dedicated server. NVMe SSD plus redundant power. 32 GB RAM minimum tier handles a few hundred active vault users plus the Events service plus a separate reverse proxy.
Installer
Standard official install: install id and key from bitwarden.com/host, hostname, Let's Encrypt issuance. SMTP for invitations and 2FA email codes. Verify nine containers up. Lock signups after creating the first owner.
SSO Setup
OIDC or SAML 2.0 via the Bitwarden Admin Portal. Tested against Keycloak, Authentik, Azure AD, Okta. SCIM provisioning works against Azure AD and Okta. SSO requires the Enterprise licence; without it your install runs free for unlimited users but without SSO.
Encryption Truth
Vault items end to end encrypted. MS SQL holds ciphered blobs. Server admins cannot decrypt. Metadata visible. SSO does not weaken vault encryption; it changes who can unlock the master password derivation path.
Backups
./bitwarden.sh backup nightly, encrypt the archive with age, restic to Anubiz Host Iceland. Test restore monthly. Retention 14/8/12.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.