Bitwarden

Install Bitwarden's entire infrastructure on Linux.

Requirements

• Ports 80 (http) and 443 (https) should be open.
• When you want to access Bitwarden from the outside world, their must be pointing a DNS record to your machine.
• Bitwarden Installation ID and Installation key are required (can be obtained from bitwarden.com/host)
• Hostname is required, example: bitwarden.example.com or an ip address

Role Variables

Variable	Default value	Comments (type)
bitwarden_http_port	80	Port to access bitwarden over HTTP
bitwarden_https_port	443	Port to access bitwarden over HTTPS
bitwarden_installation_id	[]	Unique bitwarden installation id (required)
bitwarden_installation_key	[]	Bitwarden installation key (required)
bitwarden_ssl_certificate_key_file	private.key	Bitwarden private key file name
bitwarden_ssl_certificate_file	certificate.crt	Bitwarden certificate file name
bitwarden_ssl_ca_certificate_file	ca.crt	Bitwarden ca certificate file name
bitwarden_hostname	[]	Hostname for the bitwarden server (required)
bitwarden_identitypassword	[]	Random generated password for identity server (required)
bitwarden_sql_connectionstring	[]	Random generated password for SQL server (required)
bitwarden_identityKey	[]	Random generated bitwarden identitykey (required)
bitwarden_duo_akey	[]	Random generated bitwarden duo akey (required)
bitwarden_mail	[]	Reply_to mail for bitwarden (required)
bitwarden_smtp_host	[]	Bitwarden smtp host (required)
bitwarden_smtp_port	587	Bitwarden smtp port
bitwarden_smtp_ssl	false	Bitwarden snmp ssl
bitwarden_smtp_username	[]	Bitwarden snmp username (required)
bitwarden_smtp_password	[]	Bitwarden snmp password (required)
bitwarden_UID	[]	Desired user id for running bitwarden under (required)
bitwarden_GID	[]	Desired group id for running bitwarden under (required)

bitwarden_ssl_certificate_key_file, bitwarden_ssl_certificate_file and bitwarden_ssl_ca_certificate_file must be self generated key files. See here for more information. The file names must be private.key, ca.crt certificate.crt and must be placed in de folder ansible/files/

Dependencies

The required dependencies (docker, docker-compose and unzip) are installed by the role.

Example Playbook

Minimal required playbook:

  bitwarden_installation_id: yourinstallationid
  bitwarden_installation_key: yourinstallationkey
  bitwarden_hostname: bitwarden.example.com
  bitwarden_identitypassword: identitypassword # random
  bitwarden_sql_connectionstring: sqlpassword # random
  bitwarden_identityKey: identitykey # random
  bitwarden_duo_akey: duoAkey # random
  bitwarden_mail: [email protected]
  bitwarden_smtp_host: mail.example.com
  bitwarden_smtp_username: bitwarden
  bitwarden_smtp_password: securePassword
  bitwarden_UID: 1000
  bitwarden_GID: 1000

License

BSD

Author Information

Maarten Beeckmans and Stijn Van De Moortele