NixServerConfig/module/vaultWarden.nix

22 lines
511 B
Nix

{ config, lib, ... }:
{
age.secrets.xHeDf80ikqG65h3u = {
file = ../secrets/cache/xHeDf80ikqG65h3u;
owner = "vaultwarden";
};
services.vaultwarden = {
enable = true;
environmentFile = config.age.secrets.xHeDf80ikqG65h3u.path;
config = {
DOMAIN = "https://vault.${config.module.domain}";
ROCKET_PORT = config.module.vaultwarden.internalPort;
ROCKET_ADDRESS = "127.0.0.1";
SIGNUPS_ALLOWED = false;
SMTP_PORT = 587;
# SMTP_SSL = true;
};
};
}