diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-21 19:40:42 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-21 19:41:38 +0200 |
| commit | 22bf78064c39cbbb93a132ee94b5ecf97e8c55b9 (patch) | |
| tree | 5c96c3696606bc1443d6980672909a2d78de2b8e /hosts/sagittarius/web/vaultwarden.nix | |
| parent | 51785add6fd1689b78e831fb268a2309c9463f9c (diff) | |
finalize vaultwarden migration
Diffstat (limited to 'hosts/sagittarius/web/vaultwarden.nix')
| -rw-r--r-- | hosts/sagittarius/web/vaultwarden.nix | 41 |
1 files changed, 0 insertions, 41 deletions
diff --git a/hosts/sagittarius/web/vaultwarden.nix b/hosts/sagittarius/web/vaultwarden.nix deleted file mode 100644 index 526c7bc..0000000 --- a/hosts/sagittarius/web/vaultwarden.nix +++ /dev/null @@ -1,41 +0,0 @@ -{ config, ... }: -let - cfg = config.services.vaultwarden.config; - secrets = config.sops.secrets; - domain = "vaultwarden.sorre.internal"; -in -{ - services.vaultwarden = { - # enable = false; - configureNginx = false; - dbBackend = "sqlite"; - inherit domain; - config = { - SIGNUPS_ALLOWED = false; - - ROCKET_ADDRESS = "127.0.0.1"; - ROCKET_PORT = 8222; - ROCKET_LOG = "critical"; - }; - }; - - services.nginx.virtualHosts."vaultwarden" = { - serverName = domain; - forceSSL = true; - listen = [ - { - addr = "100.64.0.3"; - port = 443; - ssl = true; - } - ]; - - sslCertificateKey = secrets."wg-ca-key".path; - sslCertificate = secrets."wg-ca-crt".path; - - locations."/" = { - proxyPass = "http://127.0.0.1:${toString cfg.ROCKET_PORT}"; - recommendedProxySettings = true; - }; - }; -} |
