Dustin C. Hatch
14cb924ba7
The *bitwarden_rs* role sets up the Bitwarden_rs server using its official Docker container. It sets up Apache as a reverse proxy for TLS support.
34 lines
825 B
YAML
34 lines
825 B
YAML
- name: ensure python docker client is installed
|
|
package:
|
|
name: python3-docker
|
|
state: present
|
|
tags:
|
|
- install
|
|
|
|
- name: ensure bitwarden_rs docker container is running
|
|
docker_container:
|
|
name: bitwarden
|
|
image: mprasil/bitwarden:latest
|
|
detach: yes
|
|
volumes:
|
|
- bw-data:/data
|
|
published_ports:
|
|
- 127.0.0.1:8080:80
|
|
- 127.0.0.1:3012:3012
|
|
env:
|
|
ADMIN_TOKEN: '{{ bitwarden_admin_token|d(omit) }}'
|
|
DOMAIN: '{{ bitwarden_domain|d(omit) }}'
|
|
WEBSOCKET_ENABLED: 'true'
|
|
|
|
- name: ensure apache is allowed to proxy
|
|
seboolean:
|
|
name: httpd_can_network_connect
|
|
persistent: true
|
|
state: true
|
|
- name: ensure apache is configured to proxy for bitwarden
|
|
template:
|
|
src: bitwarden.httpd.conf.j2
|
|
dest: /etc/httpd/conf.d/bitwarden.conf
|
|
notify:
|
|
- reload httpd
|