{ config, lib, ... }:

lib.mkIf config.sVAULTWARDEN.enable {
  services.vaultwarden = {
    enable = true;
    config = {
      ROCKET_PORT = config.sVAULTWARDEN.internalPort;
      ROCKET_ADDRESS = "127.0.0.1";
      SIGNUPS_ALLOWED = true;
    };
  };
}