bchmnn/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: change from namecheap to cloudflare, setup tls with acme, setup vaultwarden

Browse source
This commit is contained in:
Jacob Bachmann 2024-09-10 00:32:58 +02:00
parent 6b55345b66
commit fd794698d3
No known key found for this signature in database
GPG key ID: 7753026D577922A6
12 changed files with 118 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

30
hosts/APPA/services/vaultwarden.nix Normal file
View file

@ -0,0 +1,30 @@
{ config, ... }:
{
age.secrets.environments-vaultwarden = {
file = ../../../secrets/environments/vaultwarden.age;
# mode = "640";
# owner = "vaultwarden";
# group = "vaultwarden";
};
users.users.vaultwarden = {
description = "Vaultwarden Service";
home = "/var/lib/bitwarden_rs";
useDefaultShell = true;
isSystemUser = true;
};
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
environmentFile = config.age.secrets.environments-vaultwarden.path;
config = {
DOMAIN = "http://vaultwarden.dryb.org";
SIGNUPS_ALLOWED = false;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8005;
DATABASE_URL = "postgresql:///vaultwarden";
WEB_VAULT_ENABLED = true;
};
};
}