https://github.com/passbolt/lab-passbolt-ansible-poc
https://github.com/passbolt/lab-passbolt-ansible-poc
Last synced: over 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/passbolt/lab-passbolt-ansible-poc
- Owner: passbolt
- License: mit-0
- Created: 2022-04-06T14:33:55.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2024-01-31T22:19:10.000Z (over 2 years ago)
- Last Synced: 2025-01-11T17:53:42.623Z (over 1 year ago)
- Size: 13.6 MB
- Stars: 6
- Watchers: 4
- Forks: 4
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
```
👩 This project is part of the passbolt "lab"!
⚗️ It is used to illustrate an article or as a conversation starter.
🧪 Use at your own risks!
```
## Copyright & License
(c) 2021 Passbolt SA
Passbolt is registered trademark of Passbolt S.A.
MIT No Attribution - https://opensource.org/licenses/MIT-0
## Resources
* [Managing Secrets in Ansible using passbolt](https://blog.passbolt.com/managing-secrets-in-ansible-using-passbolt-87af031ceab6)
* [passbolt ansible collection](https://galaxy.ansible.com/anatomicjc/passbolt)
* [py-passbolt library](https://pypi.org/project/py-passbolt/)
## Ansible / passbolt POC
### Launch the docker-compose stack
```
docker-compose up -d
```
### Run the example playbook
Jump in the ansible container:
```
docker-compose run ansible
```
From the ansible container, launch the example playbook:
```
ansible-playbook playbooks/example-playbook.yml
```
Or in one command without jump inside the ansible container:
```
docker-compose run ansible bash -c "ansible-playbook playbooks/example-playbook.yml"
```
### Services provided by this docker stack
A passbolt CE instance available on http://localhost:12380/, you can recover an account from:
* ada@passbolt.dev
* betty@passbolt.dev
* carol@passbolt.dev
* admin@passbolt.dev
A local webmail for email recovery is available on http://localhost:12325/ for account recovery links. emails are sent by a cron job every minute.
You will need private OpenPGP keys to recover the accounts, you will find them on [pgp-keys](pgp-keys) folder.
The passphrase is the email, aka ada@passbolt.dev passphrase is ada@passbolt.dev.
### How to encrypt in ansible vault format ?
From the ansible container, to encrypt ada@passbolt.dev passphrase:
```
echo -n ada@passbolt.dev | ansible-vault encrypt
```
To encrypt the private key:
```
cat pgp-keys/ada.asc | ansible-vault encrypt
```