From 2a15e073bceaaf0765343dd57931c85cada6f89c Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Wed, 26 Aug 2026 14:52:44 +0100
Subject: vaultwarden is self-updating

---
 roles/vaultwarden/tasks/main.yml               | 12 ++++++++++++
 roles/vaultwarden/templates/openrc/vaultwarden |  2 +-
 roles/vaultwarden/templates/update_vaultwarden |  9 +++++++++
 3 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 roles/vaultwarden/templates/update_vaultwarden

(limited to 'roles')

diff --git a/roles/vaultwarden/tasks/main.yml b/roles/vaultwarden/tasks/main.yml
index 6533642..e84f220 100644
--- a/roles/vaultwarden/tasks/main.yml
+++ b/roles/vaultwarden/tasks/main.yml
@@ -24,3 +24,15 @@
     name: vaultwarden
     enabled: true
     state: started
+
+- name: Install script to update vaultwarden
+  ansible.builtin.template:
+    src: update_vaultwarden
+    dest: /usr/bin/update_vaultwarden
+    mode: "755"
+
+- name: Install daily crontab to update vaultwardern
+  ansible.builtin.cron:
+    special_time: daily
+    name: Update vaultwarden
+    job: update_vaultwarden
diff --git a/roles/vaultwarden/templates/openrc/vaultwarden b/roles/vaultwarden/templates/openrc/vaultwarden
index cf718a5..c5b7560 100755
--- a/roles/vaultwarden/templates/openrc/vaultwarden
+++ b/roles/vaultwarden/templates/openrc/vaultwarden
@@ -10,7 +10,7 @@ start() {
     --volume /var/vaultwarden/data:/data/ \
     --publish 9000:80 \
     --restart unless-stopped \
-    docker.io/vaultwarden/server:latest
+    {{ vaultwarden_image_url }}:latest
   podman start joeac.net-vaultwarden
   eend $?
 }
diff --git a/roles/vaultwarden/templates/update_vaultwarden b/roles/vaultwarden/templates/update_vaultwarden
new file mode 100644
index 0000000..51b37f5
--- /dev/null
+++ b/roles/vaultwarden/templates/update_vaultwarden
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+prev_version="$(podman inspect {{ vaultwarden_image_url }}:latest | jq .[0].Id)"
+podman pull {{ vaultwarden_image_url }}:latest
+new_version="$(podman inspect {{ vaultwarden_image_url }}:latest | jq .[0].Id)"
+if [ "$prev_version" != "$new_version" ]
+then
+  rc-service vaultwarden restart
+fi
-- 
cgit v1.2.3