flake/systems/etna/vaultwarden.nix

31 lines
621 B
Nix

{
config,
_utils,
...
}:
let
envFile = _utils.setupSingleSecret config "vaultwardenEnv" { };
in
{
imports = [ envFile.generate ];
cfTunnels."bw.uku3lig.net" = "http://localhost:8222";
services.vaultwarden = {
enable = true;
environmentFile = envFile.path;
backupDir = "/data/backups/vaultwarden";
config = {
DOMAIN = "https://bw.uku3lig.net";
SIGNUPS_ALLOWED = false;
ROCKET_ADDRESS = "::1";
ROCKET_PORT = 8222;
SMTP_HOST = "mx1.uku3lig.net";
SMTP_FROM = "services@uku3lig.net";
SMTP_PORT = 465;
SMTP_SECURITY = "force_tls";
};
};
}