jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-07-29 18:55:34 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2023-07-11 18:00

Browse Source
This commit is contained in:
Daniel Berteaud
2023-07-11 18:00:13 +02:00
parent f5d93fc293
commit b654733854
9 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/vaultwarden/defaults/main.yml
View File

@@ -1,8 +1,8 @@
---
vaultwarden_version: 1.28.1
vaultwarden_version: 1.29.0
vaultwarden_archive_url: https://github.com/dani-garcia/vaultwarden/archive/{{ vaultwarden_version }}.tar.gz
vaultwarden_archive_sha256: d6991cba20d8aaf7559eb4b8a7d82b68476c12d4913142490839addc2562d12a
vaultwarden_archive_sha256: 2f6c517663506d8aa3b4911e54ddf63ed844da0c730ba7466ae191d2414d0431
vaultwarden_web_version: 2023.5.0
vaultwarden_web_archive_url: https://github.com/dani-garcia/bw_web_builds/releases/download/v{{ vaultwarden_web_version }}/bw_web_v{{ vaultwarden_web_version }}.tar.gz
@@ -22,7 +22,6 @@ vaultwarden_db_user: vaultwarden
# Port on which vaultwarden will bind
vaultwarden_http_port: 8000
vaultwarden_ws_port: 8001
# List of IP addresses (can be CIDR notation) which will be able to
# access vaultwarden ports
vaultwarden_src_ip: []

2
roles/vaultwarden/tasks/iptables.yml
View File

@@ -4,5 +4,5 @@
iptables_raw:
name: vaultwarden
state: "{{ (vaultwarden_src_ip | length > 0) | ternary('present','absent') }}"
rules: "-A INPUT -m state --state NEW -m multiport -p tcp --dports {{ vaultwarden_http_port }},{{ vaultwarden_ws_port }} -s {{ vaultwarden_src_ip | join(',') }} -j ACCEPT"
rules: "-A INPUT -m state --state NEW -m multiport -p tcp --dports {{ vaultwarden_http_port }} -s {{ vaultwarden_src_ip | join(',') }} -j ACCEPT"
tags: firewall,vaultwarden

2
roles/vaultwarden/templates/nginx.conf.j2
View File

@@ -24,7 +24,7 @@ server {
}
location /notifications/hub {
proxy_pass http://localhost:{{ vaultwarden_ws_port }};
proxy_pass http://localhost:{{ vaultwarden_http_port }};
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}

2
roles/vaultwarden/templates/vaultwarden.conf.j2
View File

@@ -10,8 +10,6 @@ DOMAIN={{ vaultwarden_public_url }}
ROCKET_ENV=prod
ROCKET_ADDRESS=0.0.0.0
ROCKET_PORT={{ vaultwarden_http_port }}
WEBSOCKET_ENABLED=true
WEBSOCKET_PORT={{ vaultwarden_ws_port }}
SMTP_HOST=localhost
SMTP_PORT=25
SMTP_SECURITY=off