{ config, lib, ... }:

lib.mkIf config.module.vaultwarden.enable {
  services.vaultwarden = {
    enable = true;
    config = {
      ROCKET_PORT = config.module.vaultwarden.internalPort;
      ROCKET_ADDRESS = "127.0.0.1";
      SIGNUPS_ALLOWED = false;
    };
  };
}