summary refs log tree commit diff stats
path: root/modules/vaultwarden.nix
diff options
context:
space:
mode:
Diffstat (limited to 'modules/vaultwarden.nix')
-rw-r--r--modules/vaultwarden.nix23
1 files changed, 23 insertions, 0 deletions
diff --git a/modules/vaultwarden.nix b/modules/vaultwarden.nix
new file mode 100644
index 0000000..4f5aa95
--- /dev/null
+++ b/modules/vaultwarden.nix
@@ -0,0 +1,23 @@
+{ config, libs, pkgs, ...}:
+{
+
+  services.vaultwarden = {
+    enable = true;
+    config = {
+      SIGNUPS_ALLOWED = false;
+      DOMAIN = "https://vault.krinitsin.com";
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+    };
+    environmentFile = "/secret/vaultwarden.env";
+  };
+
+  services.nginx.virtualHosts."vault.krinitsin.com" = {
+    forceSSL = true;
+    useACMEHost = "krinitsin.com";
+    locations."/".proxyPass = "http://localhost:8222";
+  };
+
+  security.acme.certs."krinitsin.com".extraDomainNames = [ "vault.krinitsin.com" ];
+
+}