Vaultwarden role

Deploy Vaultwarden, a lightweight Bitwarden-compatible password manager server written in Rust.

Usage

Include the role in your playbook:

# playbooks/proxmox/deploy_docker_services.yml
- hosts: docker_services
  roles:
    - role: vaultwarden

The role provides these tags: - vaultwarden-install - Deploy Vaultwarden container - vaultwarden-uninstall - Remove Vaultwarden container

Docs

Deploy Vaultwarden to your Docker host:

ansible-playbook -i inventory/hosts.yml playbooks/proxmox/deploy_docker_services.yml --tags vaultwarden-install

Remove Vaultwarden installation:

ansible-playbook -i inventory/hosts.yml playbooks/proxmox/deploy_docker_services.yml --tags vaultwarden-uninstall

Configuration Details

The role deploys Vaultwarden with: - Official Image: Uses vaultwarden/server:latest from Docker Hub - Traefik Integration: Automatic HTTPS via Traefik reverse proxy - Persistent Storage: Local Docker volume for vault data and attachments - Network: Connects to external proxy network for Traefik routing - Automatic Updates: pull: always ensures latest image on each deployment

Accessing Vaultwarden

After deployment, Vaultwarden is available at: - URL: https://vaultwarden.rwcloud.ch (configured via Traefik labels) - Port: Internal port 80 (HTTP, proxied by Traefik with HTTPS termination)

Features

Vaultwarden provides: - Full Bitwarden API compatibility - Web vault interface - Browser extensions support - Mobile apps support (iOS, Android) - Password generator - Secure sharing - Two-factor authentication (2FA) - Low resource usage (ideal for self-hosting)

Admin Panel

To enable the admin panel, add an environment variable:

environment:
  - ADMIN_TOKEN=your_secure_random_token

Then access the admin panel at: https://vaultwarden.rwcloud.ch/admin