rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2024-11-15 05:13:10 +01:00
Code Issues Packages Projects Releases Wiki Activity

fixed vaultwarden

Browse source
This commit is contained in:
Rouven Seifert 2023-01-25 14:24:10 +01:00
parent 6b41537bc2
commit e8d6ca3917
2 changed files with 23 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/nuc/default.nix
View file

@ -7,6 +7,7 @@
./hardware-configuration.nix
./modules/networks
./modules/nextcloud
./modules/vaultwarden
./modules/nginx
../../shared/vim.nix
../../shared/sops.nix

24
hosts/nuc/modules/vaultwarden/default.nix
View file

@ -3,22 +3,36 @@ let
domain = "vault.rfive.de";
in
{
config.sops.secrets."vaultwarden/env" = { };
sops.secrets."vaultwarden/env".owner = "vaultwarden";
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
environmentFile = config.sops.secrets."vaultwarden/env".path;
config = {
domain = domain;
domain = "https://${domain}";
signupsAllowed = false;
# somehow this works
databaseUrl = "postgresql://vaultwarden@%2Frun%2Fpostgresql/vaultwarden";
rocketPort = 8000;
};
services.nginx.virtualHosts."bitwarden.example.com" = {
};
services.postgresql = {
enable = true;
ensureUsers = [
{
name = "vaultwarden";
ensurePermissions = {
"DATABASE vaultwarden" = "ALL PRIVILEGES";
};
}
];
ensureDatabases = [ "vaultwarden" ];
};
services.nginx.virtualHosts."${domain}" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
};
proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.rocketPort}";
};
};
}