From 4f4c02571c4be442d2fdb57fcdda3a5d83eb15ca Mon Sep 17 00:00:00 2001
From: Kris Lamoureux <kris@lamoureux.io>
Date: Thu, 10 Sep 2026 23:14:43 -0400
Subject: [PATCH] Loosen regexps for Bitwarden config.yml edits

---
 roles/bitwarden/tasks/main.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/roles/bitwarden/tasks/main.yml b/roles/bitwarden/tasks/main.yml
index 53f82fa..a34216d 100644
--- a/roles/bitwarden/tasks/main.yml
+++ b/roles/bitwarden/tasks/main.yml
@@ -184,18 +184,18 @@
     selevel: "{{ bitwarden_se_level }}"
   notify: rebuild_bitwarden
 
-- name: Disable bitwarden-nginx HTTP on 80
+- name: Set bitwarden-nginx's HTTP port
   ansible.builtin.replace:
     path: "{{ bitwarden_data }}/config.yml"
-    regexp: "^http_port: 80$"
+    regexp: "^http_port: .*$"
     replace: "http_port: {{ bitwarden_http_port }}"
   when: not bitwarden_standalone
   notify: rebuild_bitwarden
 
-- name: Disable bitwarden-nginx HTTPS on 443
+- name: Set bitwarden-nginx's HTTPS port
   ansible.builtin.replace:
     path: "{{ bitwarden_data }}/config.yml"
-    regexp: "^https_port: 443$"
+    regexp: "^https_port: .*$"
     replace: "https_port: {{ bitwarden_https_port }}"
   when: not bitwarden_standalone
   notify: rebuild_bitwarden
@@ -203,7 +203,7 @@
 - name: Disable Bitwarden managed Lets Encrypt
   ansible.builtin.replace:
     path: "{{ bitwarden_data }}/config.yml"
-    regexp: "^ssl_managed_lets_encrypt: true$"
+    regexp: "^ssl_managed_lets_encrypt: .*$"
     replace: "ssl_managed_lets_encrypt: false"
   when: not bitwarden_standalone or not bitwarden_production
   notify: rebuild_bitwarden
@@ -211,7 +211,7 @@
 - name: Disable Bitwarden managed SSL
   ansible.builtin.replace:
     path: "{{ bitwarden_data }}/config.yml"
-    regexp: "^ssl: true$"
+    regexp: "^ssl: .*$"
     replace: "ssl: false"
   when: not bitwarden_standalone
   notify: rebuild_bitwarden