tower: set up vaultwarden

1 files changed, 25 insertions, 0 deletions

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
new file mode 100644
index 0000000..ee38db5
--- /dev/null
+++ b/hosts/tower/web/caddy.nix
@@ -0,0 +1,25 @@
+{ config, lib, ... }:
+let
+  cfg = config.services.caddy;
+in
+{
+  services.caddy = {
+    enable = true;
+    virtualHosts = {
+      "${config.services.vaultwarden.domain}" = {
+        listenAddresses = [ "100.64.0.6" ];
+        extraConfig = ''
+          auto_https off
+          tls {$CREDENTIALS_DIRECTORY}/sagittarius.cert {$CREDENTIALS_DIRECTORY}/sagittarius.key
+        '';
+      };
+    };
+  };
+
+  systemd.services.caddy = lib.mkIf cfg.enable {
+    serviceConfig.LoadCredential = [
+      "sagittarius.cert:/var/lib/secrets/certs/sagittarius.cert"
+      "sagittarius.key:/var/lib/secrets/certs/sagittarius.key"
+    ];
+  };
+}