An ansible role to set up Vaultwarden

[stefan0xC]

I've created an ansible role to easily setup Vaultwarden (running as podman container, with postgres as database and using nginx as reverse proxy): stefan0xc.vaultwarden_ansible_podman

My main reason for writing this role was to get some first hand experience with ansible's acme_certificate_module so it might not be that useful but I hope it is of help or interest to somebody else.

Caveats:

• This ansible role is not really meant for production use but a small proof of concept for quickly setting up a vaultwarden installation.
• If you want to use it for more than 3 months consider using something like certbot (or switching to an ACME capable proxy like Caddy) because there is no automatic renewal of the certificates. (You need to run the ansible playbook again to renew the certificates.)
• This role has only been tested with Debian 11 as target host (on an amd64 machine) because bullseye already includes podman in its repositories.
• I originally planned to make the container run in rootless mode but this resulted in too many headaches with file permissions and networking issues.

Please let me know if you have questions or feedback.