viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add smtp config to vaultwarden to enable email 2fa [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2023-11-18 19:13:40 +00:00
parent 3cea41106c
commit ef6f5b5e51
4 changed files with 31 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
main.tf
View file

@ -57,6 +57,7 @@ variable "finance_app_gocardless_secret_id" {}
variable "headscale_config" {} variable "headscale_config" {}
variable "immich_postgresql_password" {} variable "immich_postgresql_password" {}
variable "ingress_honeypotapikey" {} variable "ingress_honeypotapikey" {}
variable "vaultwarden_smtp_password" {}
variable "ansible_prefix" { variable "ansible_prefix" {
default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup" default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup"
@ -283,6 +284,8 @@ module "kubernetes_cluster" {
immich_postgresql_password = var.immich_postgresql_password immich_postgresql_password = var.immich_postgresql_password
ingress_honeypotapikey = var.ingress_honeypotapikey ingress_honeypotapikey = var.ingress_honeypotapikey
vaultwarden_smtp_password = var.vaultwarden_smtp_password
} }

1
modules/kubernetes/mailserver/extra/aliases.txt
View file

@ -2,3 +2,4 @@ firmly-gerardo-generated@viktorbarzin.me me@viktorbarzin.me
closely-keith-generated@viktorbarzin.me vbarzin@gmail.com closely-keith-generated@viktorbarzin.me vbarzin@gmail.com
literally-paolo-generated@viktorbarzin.me viktorbarzin@fb.com literally-paolo-generated@viktorbarzin.me viktorbarzin@fb.com
hastily-stefanie-generated@viktorbarzin.me elliestamenova@gmail.com hastily-stefanie-generated@viktorbarzin.me elliestamenova@gmail.com
vaultwarden@viktorbarzin.me me@viktorbarzin.me

2
modules/kubernetes/main.tf
View file

@ -44,6 +44,7 @@ variable "finance_app_gocardless_secret_id" {}
variable "headscale_config" {} variable "headscale_config" {}
variable "immich_postgresql_password" {} variable "immich_postgresql_password" {}
variable "ingress_honeypotapikey" {} variable "ingress_honeypotapikey" {}
variable "vaultwarden_smtp_password" {}
resource "null_resource" "core_services" { resource "null_resource" "core_services" {
# List all the core modules that must be provisioned first # List all the core modules that must be provisioned first
@ -312,6 +313,7 @@ module "dashy" {
module "vaultwarden" { module "vaultwarden" {
source = "./vaultwarden" source = "./vaultwarden"
tls_secret_name = var.tls_secret_name tls_secret_name = var.tls_secret_name
smtp_password = var.vaultwarden_smtp_password
} }
module "reverse-proxy" { module "reverse-proxy" {

25
modules/kubernetes/vaultwarden/main.tf
View file

@ -1,4 +1,5 @@
variable "tls_secret_name" {} variable "tls_secret_name" {}
variable "smtp_password" {}
resource "kubernetes_namespace" "vaultwarden" { resource "kubernetes_namespace" "vaultwarden" {
metadata { metadata {
@ -44,6 +45,30 @@ resource "kubernetes_deployment" "vaultwarden" {
name = "DOMAIN" name = "DOMAIN"
value = "https://vaultwarden.viktorbarzin.me" value = "https://vaultwarden.viktorbarzin.me"
} }
env {
name = "SMTP_HOST"
value = "smtp.viktorbarzin.me"
}
env {
name = "SMTP_FROM"
value = "vaultwarden@viktorbarzin.me"
}
env {
name = "SMTP_PORT"
value = "587"
}
env {
name = "SMTP_SECURITY"
value = "starttls"
}
env {
name = "SMTP_USERNAME"
value = "vaultwarden@viktorbarzin.me"
}
env {
name = "SMTP_PASSWORD"
value = var.smtp_password
}
port { port {
container_port = 80 container_port = 80