feat(etna): use postgresql for vaultwarden

This commit is contained in:
uku 2025-01-28 10:49:04 +01:00
parent ec679c6dfe
commit 487f5f1c2b
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o

View file

@ -11,21 +11,36 @@ in
cfTunnels."bw.uku3lig.net" = "http://localhost:8222"; cfTunnels."bw.uku3lig.net" = "http://localhost:8222";
services.vaultwarden = { services = {
enable = true; vaultwarden = {
environmentFile = envFile.path; enable = true;
backupDir = "/data/backups/vaultwarden"; environmentFile = envFile.path;
config = { # backupDir = "/data/backups/vaultwarden";
DOMAIN = "https://bw.uku3lig.net"; dbBackend = "postgresql";
SIGNUPS_ALLOWED = false; config = {
DOMAIN = "https://bw.uku3lig.net";
SIGNUPS_ALLOWED = false;
ROCKET_ADDRESS = "::1"; ROCKET_ADDRESS = "::1";
ROCKET_PORT = 8222; ROCKET_PORT = 8222;
SMTP_HOST = "mx1.uku3lig.net"; DATABASE_URL = "postgresql:///vaultwarden";
SMTP_FROM = "services@uku3lig.net";
SMTP_PORT = 465; SMTP_HOST = "mx1.uku3lig.net";
SMTP_SECURITY = "force_tls"; SMTP_FROM = "services@uku3lig.net";
SMTP_PORT = 465;
SMTP_SECURITY = "force_tls";
};
};
postgresql = {
ensureDatabases = [ "vaultwarden" ];
ensureUsers = [
{
name = "vaultwarden";
ensureDBOwnership = true;
}
];
}; };
}; };
} }