feat(vaultwarden): add SMTP configuration options and enhance signup settings

- Introduced SMTP settings for Vaultwarden including host, port, security, and authentication details.
- Added variables for signup verification, 2FA settings, password hints, and logging options.
- Updated Vaultwarden deployment to utilize new SMTP configurations.
- Enhanced Grafana module to support dynamic dashboard and datasource provisioning.
- Added LLM proxy configuration for Open Web UI with necessary environment variables.

terraform/apps/prod-01/apps.tf

@@ -161,9 +161,20 @@ module "auth_exporter" {
 module "vaultwarden" {
   source = "../../modules/apps/vaultwarden"
 
-  persistent_folder = local.vaultwarden_folder
-  fqdn              = local.vaultwarden_fqdn
-  issuer            = local.internal_issuer
-  tag               = "1.33.4"
-  admin_token       = var.vaultwarden_admin_token
+  persistent_folder   = local.vaultwarden_folder
+  fqdn                = local.vaultwarden_fqdn
+  issuer              = local.vaultwarden_issuer
+  tag                 = local.vaultwarden_version
+  admin_token         = var.vaultwarden_admin_token
+  smtp_host           = local.vaultwarden_smtp_host
+  smtp_port           = local.vaultwarden_smtp_port
+  smtp_security       = local.vaultwarden_smtp_security
+  smtp_from           = local.vaultwarden_smtp_from
+  smtp_from_name      = local.vaultwarden_smtp_from_name
+  smtp_username       = local.vaultwarden_smtp_username
+  smtp_password       = var.vaultwarden_smtp_password
+  smtp_timeout        = local.vaultwarden_smtp_timeout
+  smtp_auth_mechanism = local.vaultwarden_smtp_auth_mechanism
+  smtp_helo_name      = local.vaultwarden_smtp_helo_name
+  smtp_embed_images   = local.vaultwarden_smtp_embed_images
 }

terraform/apps/prod-01/config.tf

@@ -211,9 +211,20 @@ locals {
   telegram_message = file("${path.module}/resources/telegram.tpl")
 
   # vaultwarden
-  vaultwarden_folder = "${local.persistent_folder}/vaultwarden"
-  vaultwarden_fqdn   = "vaultwarden.${local.primary_domain}"
-  internal_issuer    = "internal-ca"
+  vaultwarden_folder              = "${local.persistent_folder}/vaultwarden"
+  vaultwarden_fqdn                = "vaultwarden.${local.primary_domain}"
+  vaultwarden_issuer              = "internal-ca"
+  vaultwarden_version             = "1.36.0"
+  vaultwarden_smtp_host           = ""
+  vaultwarden_smtp_port           = 587
+  vaultwarden_smtp_security       = "starttls"
+  vaultwarden_smtp_from           = ""
+  vaultwarden_smtp_from_name      = "Vaultwarden"
+  vaultwarden_smtp_username       = ""
+  vaultwarden_smtp_timeout        = 15
+  vaultwarden_smtp_auth_mechanism = ""
+  vaultwarden_smtp_helo_name      = ""
+  vaultwarden_smtp_embed_images   = true
 
   # get secrets from remote state
   backup_bucket_name        = data.terraform_remote_state.scaleway.outputs.backup_bucket_name

terraform/apps/prod-01/secrets.tf

@@ -140,3 +140,10 @@ variable "vaultwarden_admin_token" {
   type        = string
   sensitive   = true
 }
+
+variable "vaultwarden_smtp_password" {
+  description = "SMTP password for VaultWarden email"
+  type        = string
+  sensitive   = true
+  default     = ""
+}

terraform/apps/prod-01/sectool.env

@@ -34,3 +34,4 @@ TF_VAR_wireguard_1_pre_shared_key=$WIREGUARD_1_PRE_SHARED_KEY
 TF_VAR_nginx_token_bearer=$NGINX_TOKEN_BEARER
 TF_VAR_telegram_bot_token=$TELEGRAM_BOT_TOKEN
 TF_VAR_vaultwarden_admin_token=$VAULTWARDEN_ADMIN_TOKEN
+TF_VAR_vaultwarden_smtp_password=$VAULTWARDEN_SMTP_PASSWORD