80 lines
2.1 KiB
YAML
80 lines
2.1 KiB
YAML
- name: Install expect
|
|
apt:
|
|
name: expect
|
|
state: present
|
|
|
|
- name: Create Bitwarden directory
|
|
file:
|
|
path: "{{ bitwarden_root }}"
|
|
state: directory
|
|
|
|
- name: Download Bitwarden script
|
|
get_url:
|
|
url: "https://raw.githubusercontent.com/\
|
|
bitwarden/self-host/master/bitwarden.sh"
|
|
dest: "{{ bitwarden_root }}"
|
|
mode: u+x
|
|
|
|
- name: Install Bitwarden script wrapper
|
|
template:
|
|
src: bw_wrapper.j2
|
|
dest: "{{ bitwarden_root }}/bw_wrapper"
|
|
mode: u+x
|
|
|
|
- name: Run Bitwarden installation script
|
|
shell: "{{ bitwarden_root }}/bw_wrapper"
|
|
args:
|
|
creates: "{{ bitwarden_root }}/bwdata/config.yml"
|
|
|
|
- name: Install docker-compose override
|
|
template:
|
|
src: compose.override.yml.j2
|
|
dest: "{{ bitwarden_root }}/bwdata/docker/docker-compose.override.yml"
|
|
when: traefik_version is defined
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Disable bitwarden-nginx HTTP on 80
|
|
replace:
|
|
path: "{{ bitwarden_root }}/bwdata/config.yml"
|
|
regexp: "^http_port: 80$"
|
|
replace: "http_port: 8080"
|
|
when: not bitwarden_standalone
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Disable bitwarden-nginx HTTPS on 443
|
|
replace:
|
|
path: "{{ bitwarden_root }}/bwdata/config.yml"
|
|
regexp: "^https_port: 443$"
|
|
replace: "https_port: 8443"
|
|
when: not bitwarden_standalone
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Disable Bitwarden managed Lets Encrypt
|
|
replace:
|
|
path: "{{ bitwarden_root }}/bwdata/config.yml"
|
|
regexp: "^ssl_managed_lets_encrypt: true$"
|
|
replace: "ssl_managed_lets_encrypt: false"
|
|
when: not bitwarden_standalone or not bitwarden_production
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Disable Bitwarden managed SSL
|
|
replace:
|
|
path: "{{ bitwarden_root }}/bwdata/config.yml"
|
|
regexp: "^ssl: true$"
|
|
replace: "ssl: false"
|
|
when: not bitwarden_standalone
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Install Bitwarden systemd service
|
|
template:
|
|
src: bitwarden.service.j2
|
|
dest: "/etc/systemd/system/{{ bitwarden_name }}.service"
|
|
register: bitwarden_systemd
|
|
notify: rebuild_bitwarden
|
|
|
|
- name: Reload systemd manager configuration
|
|
systemd:
|
|
daemon_reload: true
|
|
when: bitwarden_systemd.changed
|
|
notify: rebuild_bitwarden
|