From 7f32475c639472bf9057f547e0f3604cb9737c4f Mon Sep 17 00:00:00 2001
From: Sudoix <sudoix.com@gmail.com>
Date: Wed, 8 Jan 2025 10:16:57 +0100
Subject: [PATCH] add vaultwarden ansible role

---
 deployment/roles/vaultwarden/tasks/main.yml   | 62 +++++++++++++++++++
 .../vaultwarden-docker-compose.yaml.j2        | 20 ++++++
 2 files changed, 82 insertions(+)
 create mode 100644 deployment/roles/vaultwarden/tasks/main.yml
 create mode 100644 deployment/roles/vaultwarden/templates/vaultwarden-docker-compose.yaml.j2

diff --git a/deployment/roles/vaultwarden/tasks/main.yml b/deployment/roles/vaultwarden/tasks/main.yml
new file mode 100644
index 00000000..965038e0
--- /dev/null
+++ b/deployment/roles/vaultwarden/tasks/main.yml
@@ -0,0 +1,62 @@
+---
+# tasks file for vaultwarden
+- name: Create vaultwarden docker directory if it doesn't exist
+  file:
+    path: "{{ vaultwarden_dir }}"
+    state: directory
+
+- name: Remove postgres host from /etc/hosts if it exists
+  lineinfile:
+    path: /etc/hosts
+    regexp: '{{ postgres_host | regex_escape }}'
+    state: absent
+
+- name: Add {{ postgres_host }} host to /etc/hosts
+  lineinfile:
+    dest: /etc/hosts
+    line: "{{ hostvars['postgres-srv']['private_ip'] }} {{ postgres_host }}"
+    state: present
+  when: use_postgres == "true"
+
+- name: Copy vaultwarden docker compose file
+  template:
+    src: vaultwarden-docker-compose.yaml.j2
+    dest: "{{ vaultwarden_dir }}/docker-compose.yaml"
+
+
+- name: Check if {{ vaultwarden_container_name }} exists
+  community.docker.docker_container_info:
+    name: "{{ vaultwarden_container_name }}"
+  register: vaultwarden_running
+
+- name: Ask for confirmation to remove {{ vaultwarden_container_name }}
+  pause:
+    prompt: "We found a running {{ vaultwarden_container_name }} container. Would you like to remove it? (y/n)"
+    echo: yes
+  register: confirmation
+  when: vaultwarden_running.exists
+  delegate_to: localhost
+  run_once: true
+
+- block:
+    - name: Stop and remove {{ vaultwarden_container_name }} if confirmed
+      community.docker.docker_container:
+        name: "{{ vaultwarden_container_name }}"
+        state: absent
+      when: vaultwarden_running.exists and confirmation.user_input | lower in ['y', 'yes']
+
+    - name: Remove {{ vaultwarden_container_name }} if it exists
+      community.docker.docker_container:
+        name: "{{ vaultwarden_container_name }}"
+        state: absent
+      when: vaultwarden_running.exists and confirmation.user_input | lower in ['y', 'yes']
+
+    - name: Prune docker containers
+      shell: sudo docker container prune -f
+      when: vaultwarden_running.exists and confirmation.user_input | lower in ['y', 'yes']
+
+    - name: Start {{ vaultwarden_container_name }} with docker compose
+      community.docker.docker_compose:
+        project_src: "{{ vaultwarden_dir }}"
+        files:
+        - docker-compose.yaml
diff --git a/deployment/roles/vaultwarden/templates/vaultwarden-docker-compose.yaml.j2 b/deployment/roles/vaultwarden/templates/vaultwarden-docker-compose.yaml.j2
new file mode 100644
index 00000000..6dd15c13
--- /dev/null
+++ b/deployment/roles/vaultwarden/templates/vaultwarden-docker-compose.yaml.j2
@@ -0,0 +1,20 @@
+version: '{{ compose_version }}'
+
+services:
+  vaultwarden:
+    container_name: {{ vaultwarden_container_name }}
+    restart: unless-stopped
+    hostname: {{ vaultwarden_container_name }}
+    image: {{ vaultwarden_docker_image }}
+    ports:
+      - {{ private_ip }}:{{ vaultwarden_port }}:80
+    # extra_hosts:
+    #   - "{{ postgres_host }}:{{ hostvars['postgres-srv']['private_ip'] }}"
+    volumes:
+      - {{ vaultwarden_data_dir }}:/data/
+    environment:
+{% for env_item in vaultwarden_environment %}
+{% for key, value in env_item.items() %}
+      - {{ key }}={{ value }}
+{% endfor %}
+{% endfor %}