From 28e31c610ae7abcd8662a506a28e883715599a13 Mon Sep 17 00:00:00 2001
From: alexpdp7 <alex@pdp7.net>
Date: Sun, 26 Jan 2025 10:26:52 +0100
Subject: Add Vaultwarden (#320)

---
 .../puppet/modules/vaultwarden/manifests/init.pp   | 31 ++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 personal_infra/puppet/modules/vaultwarden/manifests/init.pp

(limited to 'personal_infra/puppet/modules/vaultwarden')

diff --git a/personal_infra/puppet/modules/vaultwarden/manifests/init.pp b/personal_infra/puppet/modules/vaultwarden/manifests/init.pp
new file mode 100644
index 00000000..d92e38f0
--- /dev/null
+++ b/personal_infra/puppet/modules/vaultwarden/manifests/init.pp
@@ -0,0 +1,31 @@
+class vaultwarden {
+  package {['vaultwarden', 'vaultwarden-web']:}
+  ->
+  file {'/var/lib/vaultwarden/data':
+    ensure => directory,
+    owner => 'vaultwarden',
+    group => 'vaultwarden',
+    mode => '700',
+  }
+  ->
+  service {'vaultwarden':
+    ensure => running,
+    enable => true,
+  }
+
+  Package['vaultwarden']
+  ->
+  file {'/etc/vaultwarden/vaultwarden.cfg':
+    content => @(EOT)
+    # see https://src.fedoraproject.org/rpms/vaultwarden/blob/rawhide/f/vaultwarden.cfg
+
+    # uncomment temporarily
+    SIGNUPS_ALLOWED=false
+    WEB_VAULT_FOLDER=/usr/share/vaultwarden-web
+    ROCKET_ADDRESS=0.0.0.0
+    | EOT
+    ,
+  }
+  ~>
+  Service['vaultwarden']
+}
-- 
cgit v1.2.3