salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add Vaultwarden

Browse Source
This commit is contained in:
Salt 2022-07-23 17:30:14 -05:00
parent 137144e9c3
commit 7fb1a91830
4 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
inventories/production/group_vars/all.yml
View File

@ -319,6 +319,15 @@ secret_synapse_db_pass: !vault |
3663623537333161630a616263656362633461366462613366323262363734353233373330393932 3663623537333161630a616263656362633461366462613366323262363734353233373330393932
36653333643632313139396631633962386533323330346639363736353863313763 36653333643632313139396631633962386533323330346639363736353863313763
# For Vaultwarden
secret_vaultwarden_db_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256
61396131623266353764386535373334653337353337326464353636343863643733663333333531
6664376235396139616466646462623666663164323461610a336566396135343431356332626337
32373535343266613565313531653061316438313332333261353435366661353437663361346434
3536306466306362340a313563333065383733373834393131306661383932643565373161356162
33643434396436343037656339343336653637356233313034356632626538616366
# For home media stuff # For home media stuff
secret_transmission_user_pass: !vault | secret_transmission_user_pass: !vault |
$ANSIBLE_VAULT;1.1;AES256 $ANSIBLE_VAULT;1.1;AES256

2
playbooks/local_dns.yml
View File

@ -104,6 +104,8 @@
value: vm-general-1.ashburn.mgmt.desu.ltd value: vm-general-1.ashburn.mgmt.desu.ltd
- record: netbox.desu.ltd - record: netbox.desu.ltd
value: vm-general-1.ashburn.mgmt.desu.ltd value: vm-general-1.ashburn.mgmt.desu.ltd
- record: vault.desu.ltd
value: vm-general-1.ashburn.mgmt.desu.ltd
# Local # Local
- record: homeauto.local.desu.ltd - record: homeauto.local.desu.ltd
value: pi-homeauto-1.home.mgmt.desu.ltd value: pi-homeauto-1.home.mgmt.desu.ltd

4
playbooks/prod_db.yml
View File

@ -41,6 +41,8 @@
password: "{{ secret_pleroma_9iron_db_pass }}" password: "{{ secret_pleroma_9iron_db_pass }}"
- name: synapse-desultd - name: synapse-desultd
password: "{{ secret_synapse_db_pass }}" password: "{{ secret_synapse_db_pass }}"
- name: vaultwarden-desultd
password: "{{ secret_vaultwarden_db_pass }}"
postgresql_databases: postgresql_databases:
- name: ara-desultd - name: ara-desultd
owner: ara-desultd owner: ara-desultd
@ -60,4 +62,6 @@
lc_collate: C lc_collate: C
lc_ctype: C lc_ctype: C
owner: synapse-desultd owner: synapse-desultd
- name: vaultwarden-desultd
owner: vaultwarden-desultd
tags: [ db, psql ] tags: [ db, psql ]

4
playbooks/prod_web.yml
View File

@ -6,7 +6,6 @@
gather_facts: no gather_facts: no
module_defaults: module_defaults:
docker_container: docker_container:
state: started
restart_policy: unless-stopped restart_policy: unless-stopped
pull: yes pull: yes
pre_tasks: pre_tasks:
@ -19,6 +18,7 @@
with_items: with_items:
- app/gitlab-runner.yml - app/gitlab-runner.yml
- app/redis.yml - app/redis.yml
- app/vaultwarden.yml
- web/9iron.yml - web/9iron.yml
- web/ara.yml - web/ara.yml
- web/desultd.yml - web/desultd.yml
@ -259,6 +259,8 @@
try_files $uri $uri/ =404; try_files $uri $uri/ =404;
- name: netbox.desu.ltd - name: netbox.desu.ltd
proxy_pass: http://netbox:8080 proxy_pass: http://netbox:8080
- name: vault.desu.ltd
proxy_pass: http://vaultwarden:80
# 9iron # 9iron
- name: www.9iron.club - name: www.9iron.club
directives: directives: