[Add bitwarden vault]
This commit is contained in:
62
bitwarden.yml
Normal file
62
bitwarden.yml
Normal file
@@ -0,0 +1,62 @@
|
|||||||
|
- name: Récupérer plusieurs secrets
|
||||||
|
hosts: localhost
|
||||||
|
vars:
|
||||||
|
ansible_vars_plugins:
|
||||||
|
- community.general.bitwarden_secrets_manager
|
||||||
|
bitwarden_secrets_manager:
|
||||||
|
api_url: "https://vault.jingoh.fr"
|
||||||
|
client_id: "0825576f-7aff-4756-814a-60b1f7241ecc"
|
||||||
|
client_secret: "ljnm14UGodGL3bRgJr01jkOAbkvzuC"
|
||||||
|
bw_session: cr5hIsIyteLzS/xdit0hhF/jpdavsyuu1BPztltjsodjEQsXf9ComunjGaTkLJBg0UzgA/yviTTwsGZ9AqGBxg==
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
# npm install -g @bitwarden/cli
|
||||||
|
# bw config server https://vault.jingoh.fr
|
||||||
|
# bw login --apikey
|
||||||
|
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:20:04]
|
||||||
|
# └─[1] <git:(main 498f2ac) > bw login --apikey
|
||||||
|
# ? client_id: user.XXXXXXXXXXXXXXX
|
||||||
|
# ? client_secret: XXXXXXXXXXXXXXXX
|
||||||
|
# You are logged in!
|
||||||
|
# bw unlock
|
||||||
|
# ┌─[stephane@staff] - [~/semaphore] - [2024-11-24 06:21:27]
|
||||||
|
# └─[1] <git:(main 498f2ac) > bw unlock
|
||||||
|
# ? Master password: [hidden]
|
||||||
|
# Your vault is now unlocked! -> BW_SESSION token
|
||||||
|
# export BW_SESSION="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
|
||||||
|
|
||||||
|
- name: Liste des secrets
|
||||||
|
debug:
|
||||||
|
msg: "{{ item }}"
|
||||||
|
loop:
|
||||||
|
- "{{ lookup('community.general.bitwarden', 'gitea admin') }}"
|
||||||
|
- "{{ lookup('community.general.bitwarden', 'Amazone') }}"
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# api_url: "https://vault.jingoh.fr"
|
||||||
|
# client_id: "user.0825576f-7aff-4756-814a-60b1f7241ecc"
|
||||||
|
# client_secret: "2SLPAQxrLk16e8hPyfLoIA5TO36E7w"
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# La régénération de la clé API invalidera la clé précédente. Vous pouvez régénérer votre clé API si vous estimez que la clé actuelle n'est plus utilisable en toute sécurité.
|
||||||
|
# Attention
|
||||||
|
# Votre clé API est un mécanisme d'authentification alternatif. Elle devrait être tenue secrète.
|
||||||
|
# Identifiants du client OAuth 2.0
|
||||||
|
|
||||||
|
# client_id:
|
||||||
|
# user.0825576f-7aff-4756-814a-60b1f7241ecc
|
||||||
|
|
||||||
|
# client_secret:
|
||||||
|
# ljnm14UGodGL3bRgJr01jkOAbkvzuC
|
||||||
|
|
||||||
|
# scope:
|
||||||
|
# api
|
||||||
|
|
||||||
|
# grant_type:
|
||||||
|
# client_credentials
|
||||||
|
|
||||||
|
|
||||||
Reference in New Issue
Block a user