slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

⚡️: add vaultwarden admin token

Browse Source
This commit is contained in:
VC
2025-02-07 16:17:49 +01:00
parent 87c0bfe937
commit b57ed3b620
3 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
inventory/host_vars/vlt1.dmz.mateu.be.yml
View File

@@ -6,3 +6,16 @@ restic_backup_path:
web_hostname: web_hostname:
- host: vault.libertus.eu - host: vault.libertus.eu
vaultwarden_admin_token: !vault |
$ANSIBLE_VAULT;1.1;AES256
62303362643639653430316564636462333638333362643435643136363962353939343961623463
3037306233323235653638393461623232333639303565330a356335343165393130333733356335
64656233323030323466323864343062303133626162613161393665363332313666363361383735
3534363066613135340a613932363930333733663337363666646539346635396231326131386537
37373761306238383131386132343936303665306335633231386639313164346634313334623137
37383938313663393961643436386338633235623965376239313566666431306435336238653633
66343563666133393235333337633361383638626231356665356663616430326234326362643832
38326263353137386437383337343964373032323535663732663639653638656266653436363063
33363662653463353965366565613531663339363563633039393234323330383430643734376436
3139313735663133366334376130353438343863343534663034

2
roles/vaultwarden/tasks/main.yml
View File

@@ -11,7 +11,7 @@
- name: Put config file - name: Put config file
ansible.builtin.template: ansible.builtin.template:
src: vaultwarden.env.j2 src: vaultwarden.env.j2
dest: "/etc/vaultwarden/vaultwarden.env" dest: "/etc/default/vaultwarden"
owner: root owner: root
group: vaultwarden group: vaultwarden
mode: "0o640" mode: "0o640"

4
roles/vaultwarden/templates/vaultwarden.env.j2
View File

@@ -15,7 +15,7 @@
#################### ####################
## Main data folder ## Main data folder
DATA_FOLDER=/srv/vaultwarden # DATA_FOLDER=/srv/vaultwarden
## Individual folders, these override %DATA_FOLDER% ## Individual folders, these override %DATA_FOLDER%
# RSA_KEY_FILENAME=data/rsa_key # RSA_KEY_FILENAME=data/rsa_key
@@ -388,7 +388,7 @@ SIGNUPS_ALLOWED=false
## New Argon2 PHC string ## New Argon2 PHC string
## Note that for some environments, like docker-compose you need to escape all the dollar signs `$` with an extra dollar sign like `$$` ## Note that for some environments, like docker-compose you need to escape all the dollar signs `$` with an extra dollar sign like `$$`
## Also, use single quotes (') instead of double quotes (") to enclose the string when needed ## Also, use single quotes (') instead of double quotes (") to enclose the string when needed
# ADMIN_TOKEN='$argon2id$v=19$m=65540,t=3,p=4$MmeKRnGK5RW5mJS7h3TOL89GrpLPXJPAtTK8FTqj9HM$DqsstvoSAETl9YhnsXbf43WeaUwJC6JhViIvuPoig78' ADMIN_TOKEN={{ vaultwarden_admin_token }}
## Old plain text string (Will generate warnings in favor of Argon2) ## Old plain text string (Will generate warnings in favor of Argon2)
# ADMIN_TOKEN=Vy2VyYTTsKPv8W5aEOWUbB/Bt3DEKePbHmI4m9VcemUMS2rEviDowNAFqYi1xjmp # ADMIN_TOKEN=Vy2VyYTTsKPv8W5aEOWUbB/Bt3DEKePbHmI4m9VcemUMS2rEviDowNAFqYi1xjmp