- Install
podman
sudo dnf install -y podman
- Create the service directory to store data and configurations
sudo mkdir -p /srv/vw01/data
- Create the VaultWarden configuration
sudo tee /srv/vw01/vw01.conf < 'EOF'
# /srv/vw01/vw01.conf
ROCKET_TLS={certs="/data/ssl/your.domain.pem",key="/data/ssl/your.domain.key"}
ADMIN_TOKEN=youradmintoken
EOF
- Create the container service
sudo tee /etc/containers/systemd/vw01.container < 'EOF'
# /etc/containers/systemd/vw01.container
[Unit]
Description=VaultWarden vw01 container
After=local-fs.target network-online.target
[Container]
Image=docker.io/vaultwarden/server:latest
AutoUpdate=registry
Exec=/start.sh --preset owasp
EnvironmentFile=/srv/vw01/vw01.conf
Volume=/srv/vw01/data/:/data/:Z
PublishPort=443:80
[Install]
WantedBy=multi-user.target default.target
EOF
- Reload the services
sudo systemctl daemon-reload
- Enable and start the container
sudo systemctl enable --now vw01
- Enable auto-updates for the container
sudo systemctl edit podman-auto-update.timer
sudo systemctl enable --now podman-auto-update.timer
# List containers
sudo podman container list
# Update containers marked to auto-update
sudo podman auto-update
man podman
man quadlet
man systemd.timer