Allow sign ups for whitelisted mail domains

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

defaults/main.yml

@@ -14,6 +14,8 @@ vaultwarden_http_port: 8222
 vaultwarden_data_location: "{{ cloud_storage }}/vaultwarden-data"
 
 vaultwarden_signups_allowed: false
+#comma separated domains that may sign up even with sign ups disabled
+vaultwarden_signups_domains_whitelist: ""
 vaultwarden_signups_verify: true
 vaultwarden_invitations_allowed: true
 vaultwarden_invitation_org_name: "Vaultwarden"

templates/opt/vaultwarden/.env.j2

@@ -4,6 +4,9 @@ LOG_LEVEL={{ vaultwarden_loglevel }}
 IP_HEADER=X-Real-IP
 
 SIGNUPS_ALLOWED={{ vaultwarden_signups_allowed | bool | lower }}
+{% if vaultwarden_signups_domains_whitelist %}
+SIGNUPS_DOMAINS_WHITELIST={{ vaultwarden_signups_domains_whitelist }}
+{% endif %}
 SIGNUPS_VERIFY={{ vaultwarden_signups_verify | bool | lower }}
 INVITATIONS_ALLOWED={{ vaultwarden_invitations_allowed | bool | lower }}
 INVITATION_ORG_NAME={{ vaultwarden_invitation_org_name }}