working: ansible

handlers/main.yml

@@ -1,9 +1,8 @@
 - name: restart container
-community.docker.docker_compose_v2:
+  community.docker.docker_compose_v2:
-    project_src: "{{ path }}"
+      project_src: "{{ path }}"
-    project_name: "{{ role_name }}"
+      project_name: "{{ role_name }}"
-    recreate: "always"
+      recreate: "always"
-    services: ["vaultwarden"]
+      services: ["vaultwarden"]
-    state: "restarted"
+      state: "restarted"
-when: not _vaultwarden_already_restarted
+  when: not _vaultwarden_already_restarted
-

meta/main.yml

@@ -16,5 +16,5 @@ galaxy_info:
     # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
     #       Maximum 20 tags per role.
 
-# dependencies:
+dependencies:
-#  - role: base
+  - role: traefik

tasks/main.yml

@@ -21,11 +21,10 @@
 
 - name: template docker-compose
   template:
-    src: compose.yaml.j2
+    src: compose.yml.j2
-    dest: "{{ path }}/compose.yaml"
+    dest: "{{ path }}/compose.yml"
   notify: restart container
 
-
 - name: ensure containers are running
   community.docker.docker_compose_v2:
     project_src: "{{ path }}"

templates/compose.yml.j2

@@ -7,7 +7,7 @@ services:
       DOMAIN: "https://{{ vaultwarden.url }}"
       ADMIN_TOKEN: "{{ vaultwarden_admin_token_hash.stdout | replace('$', '$$') }}"
 
-      {% if vaultwarden.oidc.enabled -%}
+      {% if vaultwarden.oidc.issuer | length >= 1 -%}
       SSO_ENABLED: "true"
       SSO_PKCE: "true"
       SSO_AUTHORITY: "{{ vaultwarden.oidc.issuer }}"