adding ansible.builtin.fail checks to catch people still using outdat…

…ed *whitelist settings as per PR feedback

roles/bitwarden/defaults/main.yml

@@ -5,6 +5,7 @@ bitwarden_data_directory: "{{ docker_home }}/bitwarden"
 bitwarden_port_a: "19080"
 bitwarden_port_b: "3012"
 bitwarden_hostname: "bitwarden"
+bitwarden_ip_whitelist: "deprecated"
 bitwarden_ip_allowlist: "0.0.0.0/0"
 
 # Keep this token secret, this is password to access admin area of your server!

roles/bitwarden/tasks/main.yml

@@ -1,6 +1,11 @@
 ---
 - name: Start Bitwarden
   block:
+    - name: Check for Deprecated IP Whitelist setting
+      ansible.builtin.fail:
+        msg: "Use bitwarden_ip_allowlist instead of bitwarden_ip_whitelist! Read https://traefik.io/blog/announcing-traefik-proxy-v2-11/ for more information."
+      when: bitwarden_ip_whitelist != "deprecated"
+
     - name: Create Bitwarden Directories
       ansible.builtin.file:
         path: "{{ item }}"
@@ -40,7 +45,7 @@
           traefik.http.routers.bitwarden-ws.service: "bitwarden-ws"
           traefik.http.routers.bitwarden-ws.middlewares: "bitwarden-ipallowlist@docker"
           traefik.http.services.bitwarden-ws.loadbalancer.server.port: "3012"
-          traefik.http.middlewares.bitwarden-ipallowlist.ipallowlist.sourcerange: "{{ bitwarden_ip_whitelist }}"
+          traefik.http.middlewares.bitwarden-ipallowlist.ipallowlist.sourcerange: "{{ bitwarden_ip_allowlist }}"
         memory: "{{ bitwarden_memory }}"
         restart_policy: unless-stopped
 

roles/portainer/defaults/main.yml

@@ -8,6 +8,7 @@ portainer_data_directory: "{{ docker_home }}/portainer/config"
 # network
 portainer_port: "9000"
 portainer_hostname: "portainer"
+portainer_ip_whitelist: "deprecated"
 portainer_ip_allowlist: "0.0.0.0/0"
 
 # docker

roles/portainer/tasks/main.yml

@@ -1,6 +1,11 @@
 ---
 - name: Start Portainer
   block:
+    - name: Check for Deprecated IP Whitelist setting
+      ansible.builtin.fail:
+        msg: "Use portainer_ip_allowlist instead of portainer_ip_whitelist! Read https://traefik.io/blog/announcing-traefik-proxy-v2-11/ for more information."
+      when: portainer_ip_whitelist != "deprecated"
+
     - name: Create Portainer Directories
       ansible.builtin.file:
         path: "{{ item }}"