aboutsummaryrefslogtreecommitdiff
path: root/infrastructure/roles/vaultwarden/tasks/main.yaml
blob: 313b48b1a317762f04b8d4c0b30f635fe6818a83 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
- name: create quadlet
  ansible.builtin.copy:
    dest: /etc/containers/systemd/vaultwarden.container
    content: |
      [Unit]
      After=network-online.target

      [Container]
      AutoUpdate=registry
      Image=ghcr.io/dani-garcia/vaultwarden:latest
      Exec=/start.sh
      EnvironmentFile=vaultwarden.environment
      Volume=/var/lib/vaultwarden/:/data/:idmap
      Network=host
      UserNS=auto

      [Install]
      WantedBy=default.target
  notify:
    - systemd daemon reload
    - restart quadlet
- name: create environment
  ansible.builtin.copy:
    dest: /etc/containers/systemd/vaultwarden.environment
    content: |
      DOMAIN=https://{{ public_hostname }}/vaultwarden
      SIGNUPS_DOMAINS_WHITELIST=localhost
      SIGNUPS_VERIFY=true
      SMTP_HOST=localhost
      SMTP_FROM=vaultwarden@localhost
      SMTP_SECURITY=off
      ROCKET_ADDRESS=127.0.0.1
      ROCKET_PORT=8080
  notify:
    - restart quadlet
- name: create storage
  ansible.builtin.file:
    name: /var/lib/vaultwarden
    state: directory
  notify:
    - restart quadlet
- meta: flush_handlers
- name: enable quadlet
  ansible.builtin.systemd_service:
    name: vaultwarden.service
    enabled: true
    state: started