From 5ffb1de89b98e46f8bc0e720fe9848a330af93e4 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Fri, 21 Aug 2026 19:07:36 +0200
Subject: tower: ...set up vaultwarden fr

---
 hosts/tower/web/caddy.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'hosts/tower/web')

diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index ed11339..4260064 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -1,15 +1,25 @@
 { config, lib, ... }:
 let
   cfg = config.services.caddy;
+
+  vw = {
+    domain = config.services.vaultwarden.domain;
+    port = config.services.vaultwarden.config.ROCKET_PORT;
+  };
 in
 {
   services.caddy = {
     enable = true;
     virtualHosts = {
-      "${config.services.vaultwarden.domain}" = {
+      "${vw.domain}" = {
         listenAddresses = [ "100.64.0.6" ];
         extraConfig = ''
           tls {$CREDENTIALS_DIRECTORY}/sagittarius.cert {$CREDENTIALS_DIRECTORY}/sagittarius.key
+
+          reverse_proxy 127.0.0.1:${toString vw.port} {
+            header_up True-Client-IP {remote_host}
+            header_up X-Real-IP {remote_host}
+          }
         '';
       };
     };
-- 
cgit v1.3.1