ansible-role-vaultwarden/README.md

ansible-role-vaultwarden

Builds Vaultwarden from source using Rust and installs the binary alongside the web vault UI (from dani-garcia/bw_web_builds). Sets up a systemd service.

Build time is significant (10-20 minutes depending on hardware). The role is idempotent: it only rebuilds when the target version changes.

The service user and group must be created beforehand.

Requirements

• Ansible >= 2.14
• Debian or Ubuntu
• Internet access (downloads Rust toolchain, source code, web vault)

Role Variables

Variable	Default	Description
vaultwarden_version	""	Version tag to build (empty = latest)
vaultwarden_user	vaultwarden	User to run Vaultwarden
vaultwarden_group	vaultwarden	Group to run Vaultwarden
vaultwarden_install_dir	/opt/vaultwarden	Binary installation directory
vaultwarden_data_dir	/var/lib/vaultwarden	Data directory (SQLite DB, attachments)
vaultwarden_webvault_dir	/opt/vaultwarden/web-vault	Web vault static files
vaultwarden_service_enabled	true	Enable service at boot
vaultwarden_service_state	started	Service state after installation

Example Playbook

- hosts: servers
  roles:
    - role: ansible-role-vaultwarden
      vars:
        vaultwarden_user: vaultwarden
        vaultwarden_group: vaultwarden

License

MIT