Migrate bitwarden

3 files changed, 33 insertions, 0 deletions

diff --git a/personal_infra/puppet/modules/bitwarden/manifests/init.pp b/personal_infra/puppet/modules/bitwarden/manifests/init.pp
new file mode 100644
index 00000000..d0e25b98
--- /dev/null
+++ b/personal_infra/puppet/modules/bitwarden/manifests/init.pp
@@ -0,0 +1,22 @@
+class bitwarden {
+    file {'/etc/yum.repos.d/koalillo-vaultwarden-epel-9.repo':
+        content => '[copr:copr.fedorainfracloud.org:koalillo:vaultwarden]
+name=Copr repo for vaultwarden owned by koalillo
+baseurl=https://download.copr.fedorainfracloud.org/results/koalillo/vaultwarden/epel-9-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/koalillo/vaultwarden/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1
+',
+    }
+    ->
+    package {'bitwarden_rs':}
+    ->
+    service {'bitwarden_rs':
+        ensure => running,
+        enable => true,
+    }
+}
diff --git a/personal_infra/puppet/site/bitwarden.h1.int.pdp7.net.pp b/personal_infra/puppet/site/bitwarden.h1.int.pdp7.net.pp
new file mode 100644
index 00000000..06322179
--- /dev/null
+++ b/personal_infra/puppet/site/bitwarden.h1.int.pdp7.net.pp
@@ -0,0 +1,3 @@
+node 'bitwarden.h1.int.pdp7.net' {
+  class {'bitwarden':}
+}
diff --git a/personal_infra/puppet/site/h1.pdp7.net.pp b/personal_infra/puppet/site/h1.pdp7.net.pp
index 1d634e3a..561fdf1b 100644
--- a/personal_infra/puppet/site/h1.pdp7.net.pp
+++ b/personal_infra/puppet/site/h1.pdp7.net.pp
@@ -12,6 +12,10 @@ node 'h1.pdp7.net' {
       [rpool/data/subvol-208-disk-1]
         use_template = backup
 
+      # bitwarden
+      [rpool/data/subvol-210-disk-1]
+        use_template = backup
+
       [template_backup]
         frequently=0
         hourly=0
@@ -60,6 +64,10 @@ node 'h1.pdp7.net' {
     target => 'http://nextcloud.h1.int.pdp7.net/',
   }
 
+  proxmox::proxy_host {'bitwarden.pdp7.net':
+    target => 'http://bitwarden.h1.int.pdp7.net/',
+  }
+
   package {'haproxy':}
   ->
   file {'/etc/haproxy/haproxy.cfg':