{ config, lib, ... }:

{
  age.secrets.xHeDf80ikqG65h3u  = {
    file = ../secrets/cache/xHeDf80ikqG65h3u;
    owner = "vaultwarden";
  };

  services.vaultwarden = {
    enable = true;
    environmentFile = config.age.secrets.xHeDf80ikqG65h3u.path;

    config = {
      DOMAIN = "https://vault.${config.module.domain}";
      ROCKET_PORT = config.module.vaultwarden.internalPort;
      ROCKET_ADDRESS = "127.0.0.1";
      SIGNUPS_ALLOWED = false;
      SMTP_PORT = 587;
      # SMTP_SSL = true;
    };
  };
}