blob: d17e006c4e89f1d2335257692a7b489606154057 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
{ config, ... }:
let
hostname = config.networking.hostName;
cfg = config.services.vaultwarden.config;
in
{
services.vaultwarden = {
enable = true;
configureNginx = false;
dbBackend = "sqlite";
# domain = "${hostname}.internal";
config = {
DOMAIN = "http://${hostname}.internal";
SIGNUPS_ALLOWED = true;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
ROCKET_LOG = "critical";
};
};
services.nginx.virtualHosts."vaultwarden" = {
serverName = "${hostname}.internal";
listen = [
{
addr = "[2301:db8:acad:a::1]"; # TODO: extract from topology instead of hardcoding
port = 80;
ssl = false;
}
];
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.ROCKET_PORT}";
recommendedProxySettings = true;
};
};
}
|
