diff options
| author | Joe Carstairs <me@joeac.net> | 2026-08-26 14:52:44 +0100 |
|---|---|---|
| committer | Joe Carstairs <me@joeac.net> | 2026-08-26 14:52:52 +0100 |
| commit | 2a15e073bceaaf0765343dd57931c85cada6f89c (patch) | |
| tree | ea190cb4a3d6577ada244ffe180ee3d2b9b69d83 /roles | |
| parent | 259e1caa764d4e07110bb6db7df39f206ca26a73 (diff) | |
vaultwarden is self-updating
Diffstat (limited to 'roles')
| -rw-r--r-- | roles/vaultwarden/tasks/main.yml | 12 | ||||
| -rwxr-xr-x | roles/vaultwarden/templates/openrc/vaultwarden | 2 | ||||
| -rw-r--r-- | roles/vaultwarden/templates/update_vaultwarden | 9 |
3 files changed, 22 insertions, 1 deletions
diff --git a/roles/vaultwarden/tasks/main.yml b/roles/vaultwarden/tasks/main.yml index 6533642..e84f220 100644 --- a/roles/vaultwarden/tasks/main.yml +++ b/roles/vaultwarden/tasks/main.yml @@ -24,3 +24,15 @@ name: vaultwarden enabled: true state: started + +- name: Install script to update vaultwarden + ansible.builtin.template: + src: update_vaultwarden + dest: /usr/bin/update_vaultwarden + mode: "755" + +- name: Install daily crontab to update vaultwardern + ansible.builtin.cron: + special_time: daily + name: Update vaultwarden + job: update_vaultwarden diff --git a/roles/vaultwarden/templates/openrc/vaultwarden b/roles/vaultwarden/templates/openrc/vaultwarden index cf718a5..c5b7560 100755 --- a/roles/vaultwarden/templates/openrc/vaultwarden +++ b/roles/vaultwarden/templates/openrc/vaultwarden @@ -10,7 +10,7 @@ start() { --volume /var/vaultwarden/data:/data/ \ --publish 9000:80 \ --restart unless-stopped \ - docker.io/vaultwarden/server:latest + {{ vaultwarden_image_url }}:latest podman start joeac.net-vaultwarden eend $? } diff --git a/roles/vaultwarden/templates/update_vaultwarden b/roles/vaultwarden/templates/update_vaultwarden new file mode 100644 index 0000000..51b37f5 --- /dev/null +++ b/roles/vaultwarden/templates/update_vaultwarden @@ -0,0 +1,9 @@ +#!/bin/sh + +prev_version="$(podman inspect {{ vaultwarden_image_url }}:latest | jq .[0].Id)" +podman pull {{ vaultwarden_image_url }}:latest +new_version="$(podman inspect {{ vaultwarden_image_url }}:latest | jq .[0].Id)" +if [ "$prev_version" != "$new_version" ] +then + rc-service vaultwarden restart +fi |