lander/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add vaultwarden

Browse source 
Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
This commit is contained in:
Lander Van den Bulcke 2025-10-14 15:27:05 +02:00
parent 47be484c15
commit 31e2da0570
Signed by: lander
GPG key ID: 0142722B4B0C536F
2 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

22
hosts/hosting-01/default.nix
View file

@ -156,6 +156,28 @@ in
};
};
services.vaultwarden = {
enable = true;
dbBackend = "postgresql";
config = {
DOMAIN = "bitwarden.kinkystar.com";
};
environmentFile = config.sops.secrets.vaultwarden.path;
};
sops.secrets.vaultwarden = {
owner = "root";
sopsFile = ./secrets.yaml;
};
services.nginx.virtualHosts."bitwarden.kinkystar.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://localhost:${toString config.services.vaultwarden.config.ROCKET_PORT}";
};
};
security.acme.defaults.email = "landervandenbulcke@gmail.com";
security.acme.acceptTerms = true;