diff options
Diffstat (limited to 'modules/vaultwarden.nix')
| -rw-r--r-- | modules/vaultwarden.nix | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/modules/vaultwarden.nix b/modules/vaultwarden.nix new file mode 100644 index 0000000..4f5aa95 --- /dev/null +++ b/modules/vaultwarden.nix @@ -0,0 +1,23 @@ +{ config, libs, pkgs, ...}: +{ + + services.vaultwarden = { + enable = true; + config = { + SIGNUPS_ALLOWED = false; + DOMAIN = "https://vault.krinitsin.com"; + ROCKET_ADDRESS = "127.0.0.1"; + ROCKET_PORT = 8222; + }; + environmentFile = "/secret/vaultwarden.env"; + }; + + services.nginx.virtualHosts."vault.krinitsin.com" = { + forceSSL = true; + useACMEHost = "krinitsin.com"; + locations."/".proxyPass = "http://localhost:8222"; + }; + + security.acme.certs."krinitsin.com".extraDomainNames = [ "vault.krinitsin.com" ]; + +} |