https://github.com/status-im/infra-role-bitwarden

Ansible role for deploying a BitWarden service
https://github.com/status-im/infra-role-bitwarden

ansible-role infra

Last synced: 13 days ago
JSON representation

Ansible role for deploying a BitWarden service

• Host: GitHub
• URL: https://github.com/status-im/infra-role-bitwarden
• Owner: status-im
• License: mit
• Created: 2019-08-15T17:57:53.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2019-08-22T23:08:15.000Z (over 5 years ago)
• Last Synced: 2025-01-01T20:08:48.128Z (16 days ago)
• Topics: ansible-role, infra
• Homepage:
• Size: 55.7 KB
• Stars: 1
• Watchers: 9
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Descirption

This Ansible role configures the [BitWarden](https://bitwarden.com/) service based on the instructions listed in [their documentation](https://help.bitwarden.com/article/install-on-premise/#manual-docker-installations).

# Configuration

```yaml

bitwarden_domain: secrets.example.com

bitwarden_ssl_private_key: 'super-secret-private-key'

bitwarden_ssl_certificate: 'public-certificate'

bitwarden_ssl_cert_authority: 'certificate-authority'

bitwarden_inst_id: 'Acquired from https://bitwarden.com/host/'

bitwarden_inst_key: 'Acquired from https://bitwarden.com/host/'

bitwarden_db_pass: 'mySecretDBPassword'

bitwarden_id_key: 'myInternalIdentityKey'

bitwarden_id_cert_pass: 'mySecretCertPassword'

bitwarden_smtp_user: 'smtp-user'

bitwarden_smtp_pass: 'smtp-pass'

bitwarden_smtp_host: 'smtp.example.com'

bitwarden_smtp_port: 587

bitwarden_smtp_ssl: true

# Optional YubiKey API

bitwarden_yubico_client_id: ~

bitwarden_yubico_secret_key: ~

# Duo A-Key

bitwarden_duo_akey: ~

# HaveIBeenPwned API Key

bitwarden_duo_hibp_api_key: ~

```

# Knwon Issues

* The default Nginx config assumes a lot of things

* Version upgrade will probably involve template updates

* MSSQL instance refuses to start for no reason when using `docker_compose` Ansible module

# Links

* [Discussion that started this](https://discuss.status.im/t/switching-from-lastpass-to-1password-wdyt)

* [Issue that created this role](https://github.com/status-im/infra-misc/issues/17)

* [Installation instructions](https://help.bitwarden.com/article/install-on-premise/)

* [Source of Installation ID & Key](https://bitwarden.com/host/)

* [How to access Admin Portal](https://help.bitwarden.com/article/admin-portal/)

* [How to port Premium license](https://help.bitwarden.com/article/licensing-on-premise/#organization-account-sharing)

* [How to do backups](https://help.bitwarden.com/article/backup-on-premise/)