[Add bitwarden vault]
This commit is contained in:
62
bitwarden.yml
Normal file
62
bitwarden.yml
Normal file
@@ -0,0 +1,62 @@
|
||||
- name: Récupérer plusieurs secrets
|
||||
hosts: localhost
|
||||
vars:
|
||||
ansible_vars_plugins:
|
||||
- community.general.bitwarden_secrets_manager
|
||||
bitwarden_secrets_manager:
|
||||
api_url: "https://vault.jingoh.fr"
|
||||
client_id: "0825576f-7aff-4756-814a-60b1f7241ecc"
|
||||
client_secret: "ljnm14UGodGL3bRgJr01jkOAbkvzuC"
|
||||
bw_session: cr5hIsIyteLzS/xdit0hhF/jpdavsyuu1BPztltjsodjEQsXf9ComunjGaTkLJBg0UzgA/yviTTwsGZ9AqGBxg==
|
||||
tasks:
|
||||
|
||||
# npm install -g @bitwarden/cli
|
||||
# bw config server https://vault.jingoh.fr
|
||||
# bw login --apikey
|
||||
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:20:04]
|
||||
# └─[1] <git:(main 498f2ac) > bw login --apikey
|
||||
# ? client_id: user.XXXXXXXXXXXXXXX
|
||||
# ? client_secret: XXXXXXXXXXXXXXXX
|
||||
# You are logged in!
|
||||
# bw unlock
|
||||
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:21:27]
|
||||
# └─[1] <git:(main 498f2ac) > bw unlock
|
||||
# ? Master password: [hidden]
|
||||
# Your vault is now unlocked! -> BW_SESSION token
|
||||
# export BW_SESSION="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
|
||||
|
||||
- name: Liste des secrets
|
||||
debug:
|
||||
msg: "{{ item }}"
|
||||
loop:
|
||||
- "{{ lookup('community.general.bitwarden', 'gitea admin') }}"
|
||||
- "{{ lookup('community.general.bitwarden', 'Amazone') }}"
|
||||
|
||||
|
||||
|
||||
|
||||
# api_url: "https://vault.jingoh.fr"
|
||||
# client_id: "user.0825576f-7aff-4756-814a-60b1f7241ecc"
|
||||
# client_secret: "2SLPAQxrLk16e8hPyfLoIA5TO36E7w"
|
||||
|
||||
|
||||
|
||||
|
||||
# La régénération de la clé API invalidera la clé précédente. Vous pouvez régénérer votre clé API si vous estimez que la clé actuelle n'est plus utilisable en toute sécurité.
|
||||
# Attention
|
||||
# Votre clé API est un mécanisme d'authentification alternatif. Elle devrait être tenue secrète.
|
||||
# Identifiants du client OAuth 2.0
|
||||
|
||||
# client_id:
|
||||
# user.0825576f-7aff-4756-814a-60b1f7241ecc
|
||||
|
||||
# client_secret:
|
||||
# ljnm14UGodGL3bRgJr01jkOAbkvzuC
|
||||
|
||||
# scope:
|
||||
# api
|
||||
|
||||
# grant_type:
|
||||
# client_credentials
|
||||
|
||||
|
||||
Reference in New Issue
Block a user