Initial vaultwarden role

docker compose based vaultwarden, bound to 127.0.0.1, sign ups off, admin panel only with an argon2 token, SMTP via mailcow.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tasks/main.yml

@@ -0,0 +1,43 @@
+---
+- name: install vaultwarden recommendations
+  apt:
+    update_cache: yes
+    state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
+    install_recommends: yes
+    pkg:
+      - "sqlite3"
+
+- name: setup vaultwarden directories
+  file:
+    state: directory
+    path: "{{ item }}"
+    owner: root
+    group: root
+    mode: 0750
+  loop:
+    - "{{ vaultwarden_dir }}"
+    - "{{ vaultwarden_inst }}"
+    - "{{ vaultwarden_data_location }}"
+
+- name: template vaultwarden compose file
+  template:
+    src: opt/vaultwarden/docker-compose.yml.j2
+    dest: "{{ vaultwarden_inst }}/docker-compose.yml"
+    mode: 0644
+    owner: root
+    group: root
+  notify: restart vaultwarden
+
+- name: template vaultwarden environment
+  template:
+    src: opt/vaultwarden/.env.j2
+    dest: "{{ vaultwarden_inst }}/.env"
+    mode: 0640
+    owner: root
+    group: root
+  notify: restart vaultwarden
+
+- name: start vaultwarden
+  community.docker.docker_compose_v2:
+    project_src: "{{ vaultwarden_inst }}"
+    state: present