adding vault pass script

.gitignore

@@ -1,4 +1,3 @@
 .idea
 venv
 stack.env
-.vault-pass

.vault-pass.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# fetch vault password from bitwarden. We assume there is an item called "homelab-vault" that contains the password
+password="$(bw list items | jq -r 'map(select(.name == "homelab-vault"))[0].login.password')"
+echo "${password}"

roles/setup_hosted_services/tasks/main.yml

@@ -85,11 +85,11 @@
       - /tmp:/tmp # temp s3 archive goes here
     env:
       AWS_ACCESS_KEY_ID: "{{aws_s3.aws_access_key}}"
-      AWS_SECRET_ACCESS_KEY: "{{aws_s3_secrets.aws_secret_key}}"
+      AWS_SECRET_ACCESS_KEY: "{{aws_s3.aws_secret_key}}"
       AWS_DEFAULT_REGION: "{{aws_s3.region}}"
       AWS_BUCKET: "{{aws_s3.bucket}}"
       AWS_ENDPOINT: "{{aws_s3.s3_url}}"
-  with_items: "{{ python_output.stdout_lines  }}"
+  with_items: "{{ python_output.stdout_lines }}"
 
 - name: Docker | Create required docker networks
   docker_network:

roles/setup_portainer/defaults/main.yml

@@ -1,7 +1,2 @@
 ---
 docker_compose_directory: /etc/docker-compose/portainer
-aws_s3:
-  s3_url: "l8x8.ie11.idrivee2-6.com"
-  aws_access_key: "nyNMQ3fRMSV0bA1xw5uV"
-  region: "us-east-1"
-  bucket: "backups"

roles/setup_portainer/files/docker-compose.yml

@@ -1,3 +1,4 @@
+---
 version: '3.2'
 services:
   portainer:

roles/setup_portainer/molecule/default/converge.yml

@@ -1,7 +0,0 @@
----
-- name: Converge
-  hosts: all
-  tasks:
-    - name: "Include chatton.setup_portainer"
-      include_role:
-        name: "chatton.setup_portainer"

roles/setup_portainer/molecule/default/molecule.yml

@@ -1,29 +0,0 @@
----
-dependency:
-  name: galaxy
-driver:
-  name: docker
-platforms:
-  - name: instance
-    image: geerlingguy/docker-debian10-ansible:latest
-    privileged: true
-    pre_build_image: true
-provisioner:
-  name: ansible
-verifier:
-  name: ansible
-scenario:
-  test_sequence:
-    #    - dependency
-    #    - lint
-    #    - cleanup
-    - destroy
-    - syntax
-    - create
-    #    - prepare
-    - converge
-    - idempotence
-    #    - side_effect
-    - verify
-    #    - cleanup
-    - destroy

roles/setup_portainer/molecule/default/verify.yml

@@ -1,10 +0,0 @@
----
-# This is an example playbook to execute Ansible tests.
-
-- name: Verify
-  hosts: all
-  gather_facts: false
-  tasks:
-  - name: Example assertion
-    ansible.builtin.assert:
-      that: true

roles/setup_portainer/tasks/main.yml

@@ -36,7 +36,7 @@
       - /tmp:/tmp # temp s3 archive goes here
     env:
       AWS_ACCESS_KEY_ID: "{{aws_s3.aws_access_key}}"
-      AWS_SECRET_ACCESS_KEY: "{{aws_s3_secrets.aws_secret_key}}"
+      AWS_SECRET_ACCESS_KEY: "{{aws_s3.aws_secret_key}}"
       AWS_DEFAULT_REGION: "{{aws_s3.region}}"
       AWS_BUCKET: "{{aws_s3.bucket}}"
       AWS_ENDPOINT: "{{aws_s3.s3_url}}"

secrets-vault.yml

@@ -1,12 +1,18 @@
 $ANSIBLE_VAULT;1.1;AES256
-35306338393365346261356466633235356231626264633934303137616236666238643762653630
-3333306538363131373836326238623464366533383662610a316161386262333532366163616233
-32333131666435376138343663343130306138393832366334393764343665393964363535343064
-3266336438643439660a353339623865316133653563666562633837303539626335346531393332
-64376161633562653236323638656639356462323136343532613035316561623463623764373033
-32366637376661376335366534353738323562316330633536333061633937366264323035326438
-66343835383539313532316232663431366233653235366230653031616366396630336664393930
-63383934643465623036326532353833353134666136393263656165373133303534333062393531
-61663139633233303830313162623762326338356165383963303161336230333130306231643866
-31363337326630306434656665393664343033646339303562663634623933336463366662353664
-353764353965353164373834663937316162
+61363762386463363239383863386334663239316431656632363337383662393836666161383866
+6632613662396362326535343637653038303132346236660a646133323461333133623663363936
+66303762383261386437653030343465336463383561623661623837316337303032323364303763
+3836333231663065390a363833626265636665333431616364613736366339633231346630663664
+65313366366532363266373530623938366435303734356139303635393731623866343733663864
+34306363313964393965303632366265376136343964626562653866633233333762366132336663
+34343962363263373662626534396535356533323931316535303366346233306565353032643636
+35653135663936636632656535306562636461366133343963666462396364613434356439313364
+37376565646232346634313166306263653361633136383061353831383061376335323330366431
+38623938633236326539633334303835343662373461313738333531653763623835383431343332
+64613362396138643036643762643030636332663632376438393664623434646562396431333166
+63636132346565323434663063366631373162623863343564326465613936663533303135383637
+65366531316630353565396537656561643162616339616439666662316437366165393361363432
+37633137643837656238613738666634663162636532336530636231363135383965323833323333
+39306165356564633032333135383366356163343530393833373666636134386166653333613161
+36383039346531643134396432643738623862353338363737343134353033663636353762353561
+3936