You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
70 lines
2.6 KiB
70 lines
2.6 KiB
# General
|
|
install_ansible_modules: "true"
|
|
disable_transparent_huge_pages: "true"
|
|
|
|
# Docker and Docker Compose
|
|
compose_version: "3"
|
|
docker_gpg_key_url: "https://download.docker.com/linux/{{ ansible_distribution | lower }}"
|
|
docker_gpg_key_path: "/etc/apt/keyrings/docker.asc"
|
|
docker_apt_repo: "https://download.docker.com/linux/{{ ansible_distribution | lower }}"
|
|
docker_data_path: "/data_docker"
|
|
|
|
# Postgres
|
|
use_postgres: "true" # Change me to "false" if you have postgres already running
|
|
postgres_dir: "{{ docker_data_path }}/postgres"
|
|
postgres_data_dir: "{{ postgres_dir }}/data"
|
|
postgres_container_name: "postgres_vaultwarden"
|
|
postgres_docker_image: "postgres:15-alpine"
|
|
postgres_port: "5432"
|
|
postgres_user: "vaultwarden"
|
|
postgres_password: "S3cret" # It's better to use ansible vault :)
|
|
postgres_db: "vaultwarden"
|
|
postgres_host: "postgres.yourdomain.com" # Set to FQDN or IP address
|
|
|
|
# Vaultwarden
|
|
vaultwarden_dir: "{{ docker_data_path }}/vaultwarden"
|
|
vaultwarden_data_dir: "{{ vaultwarden_dir }}/data"
|
|
vaultwarden_container_name: "vaultwarden"
|
|
vaultwarden_docker_image: "vaultwarden/server:1.32.7"
|
|
vaultwarden_port: "1234"
|
|
vaultwarden_domain: "vault.yourdomain.com"
|
|
vaultwarden_environment:
|
|
- DOMAIN: "https://{{ vaultwarden_domain }}"
|
|
- LOGIN_RATELIMIT_MAX_BURST: "10"
|
|
- ADMIN_TOKEN: "YourReallyStrongAdminTokenHere"
|
|
- DATABASE_URL: postgresql://{{ postgres_user }}:{{ postgres_password }}@{{ postgres_host }}:{{ postgres_port }}/{{ postgres_db }}
|
|
- LOGIN_RATELIMIT_SECONDS: 60
|
|
- ADMIN_RATELIMIT_MAX_BURST: 10
|
|
- ADMIN_RATELIMIT_SECONDS: 60
|
|
- SENDS_ALLOWED: true
|
|
- EMERGENCY_ACCESS_ALLOWED: true
|
|
- WEB_VAULT_ENABLED: true
|
|
- SIGNUPS_ALLOWED: false
|
|
- SIGNUPS_VERIFY: true
|
|
- SIGNUPS_VERIFY_RESEND_TIME: 3600
|
|
- SIGNUPS_VERIFY_RESEND_LIMIT: 5
|
|
- SMTP_HOST: smtp.youremaildomain.com
|
|
- SMTP_FROM: vaultwarden@youremaildomain.com
|
|
- SMTP_FROM_NAME: Vaultwarden
|
|
- SMTP_SECURITY: SECURITYMETHOD
|
|
- SMTP_PORT: XXXX
|
|
- SMTP_USERNAME: vaultwarden@youremaildomain.com
|
|
- SMTP_PASSWORD: YourReallyStrongPasswordHere
|
|
- SMTP_AUTH_MECHANISM: Mechanism
|
|
|
|
# Keepalived
|
|
use_keepalived: "true" # Change me to "false" if you want to run without keepalived(three servers)
|
|
vrrp_check_nginx_script_path: "/usr/local/bin/check_nginx.sh"
|
|
vrrp_interface: "eth0"
|
|
vrrp_auth_password: "your_password"
|
|
vrrp_virtual_ip: "192.168.100.100/24"
|
|
|
|
# Nginx
|
|
nginx_dir: "{{ docker_data_path }}/nginx"
|
|
nginx_data_dir: "{{ nginx_dir }}/conf.d"
|
|
nginx_certs_dir: "{{ nginx_dir }}/certs"
|
|
nginx_certs_email: "youremail@yourdomain.com"
|
|
nginx_container_name: "nginx_vaultwarden"
|
|
nginx_docker_image: "nginx:1.25-alpine"
|
|
nginx_http_port: "80"
|
|
nginx_https_port: "443"
|
|
|