Migrate Bitwarden to rootless Podman with SELinux

2026-09-06 16:10:48 -04:00
parent a1ef6e76a5
commit adda06628b
12 changed files with 374 additions and 58 deletions
@@ -1,16 +1,16 @@
-version: '3'
-
+# {{ ansible_managed }}
 services:
-  nginx:
-    networks:
-      - traefik
-    labels:
-      traefik.http.routers.bitwarden.rule: "Host(`{{ bitwarden_domain }}`)"
-      traefik.http.routers.bitwarden.entrypoints: {{ bitwarden_entrypoint | default('web') }}
-      traefik.http.routers.bitwarden.tls: {{ bitwarden_traefik_tls | default('false') }}
-      traefik.http.services.bitwarden.loadbalancer.server.port: 8080
-      traefik.docker.network: traefik
-      traefik.enable: "true"
-networks:
-  traefik:
-    external: true
+{% for service in bitwarden_services %}
+  {{ service }}:
+{% if service == 'nginx' %}
+    user: "0:0"
+{% endif %}
+{% if service == 'identity' %}
+    environment:
+      globalSettings__knownNetworks: "{{ bitwarden_realips }}"
+    volumes:
+      - {{ bitwarden_logs }}/identity:/etc/bitwarden/logs
+{% endif %}
+    security_opt:
+      - label=level:{{ bitwarden_se_level }}
+{% endfor %}