rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-25 16:08:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

initial vaultwarden config

Browse source
This commit is contained in:
Rouven Seifert 2023-01-25 13:48:58 +01:00
parent 1e517e58d2
commit 6b41537bc2
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 28 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

24
hosts/nuc/modules/vaultwarden/default.nix Normal file
View file

@ -0,0 +1,24 @@
{ config, pkgs, ... }:
let
domain = "vault.rfive.de";
in
{
config.sops.secrets."vaultwarden/env" = { };
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
environmentFile = config.sops.secrets."vaultwarden/env".path;
config = {
domain = domain;
signupsAllowed = false;
rocketPort = 8000;
};
services.nginx.virtualHosts."bitwarden.example.com" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
};
};
};
}