cleslie/nixfiles
1
0
Fork 0
mirror of https://github.com/callumio/nixfiles.git synced 2025-12-17 03:29:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

vaultwarden

Browse source
This commit is contained in:
Callum Leslie 2024-10-15 16:32:53 +01:00
parent 661ded9126
commit af15c64ead
Signed by: cleslie
GPG key ID: D382C4AFEECEAA90
5 changed files with 39 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/hermes/default.nix
View file

@ -11,5 +11,6 @@
./media.nix
./headscale.nix
./forgejo.nix
./vaultwarden.nix
];
}

29
hosts/hermes/vaultwarden.nix Normal file
View file

@ -0,0 +1,29 @@
{config, ...}: let
domain = "vaultwarden.cleslie.uk";
in {
services = {
cloudflare-dyndns.domains = [domain];
vaultwarden = {
enable = true;
dbBackend = "sqlite";
config = {
DOMAIN = "https://${domain}";
SIGNUPS_ALLOWED = false;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
ROCKET_LOG = "critical";
};
environmentFile = "${config.age.secrets.vaultwarden-env.path}";
};
caddy.virtualHosts.${domain}.extraConfig = ''
reverse_proxy localhost:${toString config.services.vaultwarden.config.ROCKET_PORT} {
header_up X-Real-IP {remote_host}
}
'';
};
age.secrets."vaultwarden-env" = {
file = ../../secrets/vaultwarden-env.age;
};
}