foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 04:58:01 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/plover: update and re-enable Vaultwarden service

Browse Source
This commit is contained in:
Gabriel Arazas 2024-10-02 21:16:15 +08:00
parent 408835e11a
commit 88bb626d46
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
2 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
configs/nixos/plover/default.nix
View File

@ -28,6 +28,9 @@
reverse-proxy.enable = true;
fail2ban.enable = true;
grafana.enable = true;
# All of the self-hosted applications belong in here.
vaultwarden.enable = true;
};
# We're using our own VPN configuration for this one.

10
configs/nixos/plover/modules/services/vaultwarden.nix
View File

@ -20,6 +20,8 @@ in
config = lib.mkIf cfg.enable (lib.mkMerge [
{
state.ports.vaultwarden.value = 8222;
sops.secrets = foodogsquaredLib.sops-nix.getSecrets ../../secrets/secrets.yaml {
"vaultwarden/env".owner = vaultwardenUser;
};
@ -32,7 +34,7 @@ in
# Configuring the server.
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
ROCKET_PORT = config.state.ports.vaultwarden.value;
# Ehh... It's only a few (or even one) users anyways so nah. Since this
# instance will not configure SMTP server, this pretty much means
@ -55,12 +57,6 @@ in
# Enabling web vault with whatever nixpkgs comes in.
WEB_VAULT_ENABLED = true;
# Mailer service configuration (except the user and password).
SMTP_HOST = "smtp.sendgrid.net";
SMTP_PORT = 587;
SMTP_FROM_NAME = "Vaultwarden";
SMTP_FROM = "bot+vaultwarden@foodogsquared.one";
};
};