lhahnandClaude Opus 5.5
0417ecd9a1
- SSO_* settings (login only, master password still decrypts the vault) - optional authentik blueprint: provider with authorization_code/refresh_token grants, application and an email mapping with email_verified, which vaultwarden requires to link SSO logins to existing accounts - blueprints are copied into the authentik container, it only applies files from /blueprints Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
43 lines
1.5 KiB
Bash
43 lines
1.5 KiB
Bash
### BASIC ###
|
|
DOMAIN=https://{{ vaultwarden_domain }}
|
|
LOG_LEVEL={{ vaultwarden_loglevel }}
|
|
IP_HEADER=X-Real-IP
|
|
|
|
SIGNUPS_ALLOWED={{ vaultwarden_signups_allowed | bool | lower }}
|
|
{% if vaultwarden_signups_domains_whitelist %}
|
|
SIGNUPS_DOMAINS_WHITELIST={{ vaultwarden_signups_domains_whitelist }}
|
|
{% endif %}
|
|
SIGNUPS_VERIFY={{ vaultwarden_signups_verify | bool | lower }}
|
|
INVITATIONS_ALLOWED={{ vaultwarden_invitations_allowed | bool | lower }}
|
|
INVITATION_ORG_NAME={{ vaultwarden_invitation_org_name }}
|
|
SHOW_PASSWORD_HINT={{ vaultwarden_show_password_hint | bool | lower }}
|
|
PASSWORD_ITERATIONS={{ vaultwarden_password_iterations }}
|
|
|
|
{# admin panel stays disabled without a token #}
|
|
{% if vaultwarden_admin_token %}
|
|
ADMIN_TOKEN='{{ vaultwarden_admin_token }}'
|
|
{% endif %}
|
|
|
|
|
|
### SSO ###
|
|
SSO_ENABLED={{ vaultwarden_sso_enabled | bool | lower }}
|
|
{% if vaultwarden_sso_enabled | bool %}
|
|
SSO_ONLY={{ vaultwarden_sso_only | bool | lower }}
|
|
SSO_SIGNUPS_MATCH_EMAIL={{ vaultwarden_sso_signups_match_email | bool | lower }}
|
|
SSO_AUTHORITY={{ vaultwarden_sso_authority }}
|
|
SSO_SCOPES="{{ vaultwarden_sso_scopes }}"
|
|
SSO_PKCE=true
|
|
SSO_CLIENT_ID={{ vaultwarden_sso_client_id }}
|
|
SSO_CLIENT_SECRET='{{ vaultwarden_sso_client_secret }}'
|
|
{% endif %}
|
|
|
|
|
|
### SMTP ###
|
|
SMTP_HOST={{ vaultwarden_smtp_host }}
|
|
SMTP_PORT={{ vaultwarden_smtp_port }}
|
|
SMTP_SECURITY={{ vaultwarden_smtp_security }}
|
|
SMTP_FROM={{ vaultwarden_smtp_from }}
|
|
SMTP_FROM_NAME={{ vaultwarden_smtp_from_name }}
|
|
SMTP_USERNAME={{ vaultwarden_smtp_user }}
|
|
SMTP_PASSWORD='{{ vaultwarden_smtp_pass }}'
|