personal_infra/puppet/modules/vaultwarden/manifests/init.pp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

class vaultwarden {
  package {['vaultwarden', 'vaultwarden-web']:}
  ->
  file {'/var/lib/vaultwarden/data':
    ensure => directory,
    owner => 'vaultwarden',
    group => 'vaultwarden',
    mode => '700',
  }
  ->
  service {'vaultwarden':
    ensure => running,
    enable => true,
  }

  Package['vaultwarden']
  ->
  file {'/etc/vaultwarden/vaultwarden.cfg':
    content => @(EOT)
    # see https://src.fedoraproject.org/rpms/vaultwarden/blob/rawhide/f/vaultwarden.cfg

    # uncomment temporarily
    SIGNUPS_ALLOWED=false
    WEB_VAULT_FOLDER=/usr/share/vaultwarden-web
    ROCKET_ADDRESS=0.0.0.0
    | EOT
    ,
  }
  ~>
  Service['vaultwarden']
}