1 files changed, 15 insertions, 0 deletions
diff --git a/hosts/enode/caddy.nix b/hosts/enode/caddy.nix
index afb3b69..6a0cbdd 100644
--- a/hosts/enode/caddy.nix
+++ b/hosts/enode/caddy.nix
@@ -40,6 +40,21 @@ in
           header_up X-Real-IP {remote_host}
         }
       '';
+      "vaultwarden.sorre.xyz".extraConfig = ''
+        tls {
+          client_auth {
+            mode require_and_verify
+            trust_pool file {
+              pem_file ${../../etc/certs/rootCA.crt}
+            }
+          }
+        }
+
+        reverse_proxy https://vaultwarden.sorre.internal:443 {
+          header_up True-Client-IP {remote_host}
+          header_up X-Real-IP {remote_host}
+        }
+      '';
     }
     // simpleProxyVirtualHosts;
   };