docker compose based vaultwarden, bound to 127.0.0.1, sign ups off, admin panel only with an argon2 token, SMTP via mailcow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
44 lines
1018 B
YAML
44 lines
1018 B
YAML
---
|
|
- name: install vaultwarden recommendations
|
|
apt:
|
|
update_cache: yes
|
|
state: "{% if cloud_update | bool %}latest{% else %}present{% endif %}"
|
|
install_recommends: yes
|
|
pkg:
|
|
- "sqlite3"
|
|
|
|
- name: setup vaultwarden directories
|
|
file:
|
|
state: directory
|
|
path: "{{ item }}"
|
|
owner: root
|
|
group: root
|
|
mode: 0750
|
|
loop:
|
|
- "{{ vaultwarden_dir }}"
|
|
- "{{ vaultwarden_inst }}"
|
|
- "{{ vaultwarden_data_location }}"
|
|
|
|
- name: template vaultwarden compose file
|
|
template:
|
|
src: opt/vaultwarden/docker-compose.yml.j2
|
|
dest: "{{ vaultwarden_inst }}/docker-compose.yml"
|
|
mode: 0644
|
|
owner: root
|
|
group: root
|
|
notify: restart vaultwarden
|
|
|
|
- name: template vaultwarden environment
|
|
template:
|
|
src: opt/vaultwarden/.env.j2
|
|
dest: "{{ vaultwarden_inst }}/.env"
|
|
mode: 0640
|
|
owner: root
|
|
group: root
|
|
notify: restart vaultwarden
|
|
|
|
- name: start vaultwarden
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ vaultwarden_inst }}"
|
|
state: present
|