Research-Stack/4-Infrastructure/kube/manifests/vaultwarden.yaml
Brandon Schneider e4a3ffd6ee fix(infra): configure vaultwarden-api with user credentials
- Vaultwarden signups enabled then disabled after user created
- vaultwarden-api configured with allaun@researchstack.info
- API verified responding at vaultapi.researchstack.info

Build: 3313 jobs, 0 errors (lake build Compiler)
2026-05-31 13:36:51 -05:00

130 lines
2.7 KiB
YAML

---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: vaultwarden-data
namespace: media
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
storageClassName: local-path
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: vaultwarden
namespace: media
spec:
replicas: 1
selector:
matchLabels:
app: vaultwarden
template:
metadata:
labels:
app: vaultwarden
spec:
nodeSelector:
kubernetes.io/hostname: qfox-1
containers:
- name: vaultwarden
image: vaultwarden/server:latest
ports:
- containerPort: 80
env:
- name: SIGNUPS_ALLOWED
value: "true"
- name: DOMAIN
value: "https://vault.researchstack.info"
volumeMounts:
- name: data
mountPath: /data
volumes:
- name: data
persistentVolumeClaim:
claimName: vaultwarden-data
---
apiVersion: v1
kind: Service
metadata:
name: vaultwarden
namespace: media
spec:
type: NodePort
ports:
- port: 80
targetPort: 80
nodePort: 30106
selector:
app: vaultwarden
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: vaultwarden-api
namespace: media
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Gi
storageClassName: local-path
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: vaultwarden-api
namespace: media
spec:
replicas: 1
selector:
matchLabels:
app: vaultwarden-api
template:
metadata:
labels:
app: vaultwarden-api
spec:
nodeSelector:
kubernetes.io/hostname: qfox-1
containers:
- name: api
image: ghcr.io/turbootzz/vaultwarden-api:latest
ports:
- containerPort: 8080
env:
- name: VAULTWARDEN_URL
value: "http://vaultwarden:80"
- name: VAULTWARDEN_EMAIL
value: "secrets@researchstack.info"
- name: VAULTWARDEN_PASSWORD
value: "RY03KhsFez73K5va2uUb"
- name: API_KEY
value: "RY03KhsFez73K5va2uUb-vaultwarden-api-key"
- name: ENVIRONMENT
value: "production"
volumeMounts:
- name: data
mountPath: /data
volumes:
- name: data
persistentVolumeClaim:
claimName: vaultwarden-api
---
apiVersion: v1
kind: Service
metadata:
name: vaultwarden-api
namespace: media
spec:
type: NodePort
ports:
- port: 8080
targetPort: 8080
nodePort: 30107
selector:
app: vaultwarden-api