From eb3f95f3d5d7cd7d2f6e378c408c0ca17f2272b3 Mon Sep 17 00:00:00 2001
From: Christian Krinitsin <code@krinitsin.xyz>
Date: Tue, 25 Mar 2025 23:14:41 +0100
Subject: add password manager

---
 modules/vaultwarden.nix | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 modules/vaultwarden.nix

(limited to 'modules')

diff --git a/modules/vaultwarden.nix b/modules/vaultwarden.nix
new file mode 100644
index 0000000..4f5aa95
--- /dev/null
+++ b/modules/vaultwarden.nix
@@ -0,0 +1,23 @@
+{ config, libs, pkgs, ...}:
+{
+
+  services.vaultwarden = {
+    enable = true;
+    config = {
+      SIGNUPS_ALLOWED = false;
+      DOMAIN = "https://vault.krinitsin.com";
+      ROCKET_ADDRESS = "127.0.0.1";
+      ROCKET_PORT = 8222;
+    };
+    environmentFile = "/secret/vaultwarden.env";
+  };
+
+  services.nginx.virtualHosts."vault.krinitsin.com" = {
+    forceSSL = true;
+    useACMEHost = "krinitsin.com";
+    locations."/".proxyPass = "http://localhost:8222";
+  };
+
+  security.acme.certs."krinitsin.com".extraDomainNames = [ "vault.krinitsin.com" ];
+
+}
-- 
cgit 1.4.1